From owner-cvs-src@FreeBSD.ORG  Thu Feb 26 14:52:03 2004
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1B20516A4CE; Thu, 26 Feb 2004 14:52:03 -0800 (PST)
Received: from smtp.fud.org.nz (203-79-110-29.cable.paradise.net.nz
	[203.79.110.29])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 4311343D41; Thu, 26 Feb 2004 14:52:02 -0800 (PST)
	(envelope-from andy@fud.org.nz)
Received: by smtp.fud.org.nz (Postfix, from userid 1001)
	id F0385170DE; Fri, 27 Feb 2004 11:52:00 +1300 (NZDT)
Date: Fri, 27 Feb 2004 11:52:00 +1300
From: Andrew Thompson <andy@fud.org.nz>
To: kientzle@acm.org
Message-ID: <20040226225200.GB28986@kate.fud.org.nz>
References: <Pine.NEB.3.96L.1040226150526.79901Y-100000@fledge.watson.org>
	<403E75F1.2070302@kientzle.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <403E75F1.2070302@kientzle.com>
User-Agent: Mutt/1.5.6i
cc: Max Laier <mlaier@FreeBSD.org>
cc: "Jacques A. Vidrine" <nectar@FreeBSD.org>
cc: cvs-src@FreeBSD.org
cc: cvs-all@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: Robert Watson <rwatson@FreeBSD.org>
cc: Steve Kargl <sgk@troutmask.apl.washington.edu>
Subject: Re: cvs commit: src/sys/contrib/pf/net if_pflog.c
	if_pflog.hif_pfsync.c src/sys/contrib/pf/netinet in4_cksum.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Feb 2004 22:52:03 -0000

On Thu, Feb 26, 2004 at 02:40:49PM -0800, Tim Kientzle wrote:
> >>>Choice is good.  Three firewalls is maybe pushing the limit, but these
> >>>three are Very Important to our community.
> 
> Dunno about pf, but neither ipfw nor ipf have one
> feature I've been looking for.  I'd like to be able
> to say something like:
> 
>   create set BLACKLIST
>   drop ip in BLACKLIST

FWIW,

pf implements this with tables. 

http://www.openbsd.org/faq/pf/tables.html