ipf debakel: resolution ?

[Christian Bahls <christian.bahls@stud.uni-rostock.de>]

Theo de Raadt wrote:
> 
> > I totally understand why Theo is removing ipf from the src tree and I
> > totally agree with him on it.  But my concern is what are we going to
> > replace it with?  Theo, Any ideas on what is going to replace ipf?  And is
> > ipf going to go into 2.9 or not?
> 
> Some people are looking at ipfw as a starting point.  That leaves
> quite a few gaps at first, but we'll see what happens.  Others are
> looking at other ideas.  We'll see.

what about using the code from IPSec ..
it already implements an SPD ..
this would just have to be expanded
.. wouldn't it ..

you would have the benefit of a tighter integration
of firewall and IPSec .. you could use Keynote as well ..

my euro 0.02

christian bahls