then again, its seems that i spoke (somewhat) too soon ... looks like OpenBSD's "pf" has been ported to FreeBSD 5.x (<http://pf4freebsd.love2party.net/>) as a lodable kernel module. what implications that has for Darwin, i honestly don't know ... comments/thoughts anyone? richard On a related note, is there any interest in exploring the potential benefits of Daniel Hartmeier's pf or Darren Reid's ipf? - -Jeff On Nov 22, 2003, at 5:53 PM, OpenMacNews wrote: hi all, what plans/progress exist for updating Darwin's "ipfw" to "ipfw2"? having moved from a FreeBSD box to a Mac, there are several features missing from ipfw that i'm having to work around ... in particular, the assignment/use of rule sets and the ability to assign boolean concatenations of IP ranges to a variable, then use the variable in a rule. or, there's always the possibility that i'm missing an already existing feature set in current Darwin .... if it exists, a friendly pointer to it would be much appreciated! thanks, richard _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.