Re: rc.firewall

[Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>]

:andy@xxxxxxxxxxxxxxx wrote:
:> Hoi,
:> 
:> this replaces rc.firewall so that it doesn't need to be
:> modified anymore and can be used with rc.conf variables.
:> 
:> Andy
:> 
:> http://ftp.fortunaty.net/DragonFly/inofficial/patches/rc.firewall.patch
:> 
:
:Real nice work Andy!
:
:One question though, are you (or anyone else here on this list) planning 
:to extend rc.firewall to use PF in some sort of way?
:IMHO, as long as the rc variables are named "firewall_enable" etc they 
:should support more than one packetfilter.
:
:  - Erik

   I think it would be a bit too messy to try to support multiple firewalls
   in a single script, but there is no reason why a second script couldn't be
   written for PF that utilizes the same firewall_* rc variables, now that
   Andy has broken out the meat of the configuration into firewall rc
   variables.

					-Matt
					Matthew Dillon 
					<dillon@xxxxxxxxxxxxx>