On Tue, 8 Aug 2017 16:53:11 -0700, Brian Buhrow wrote: > Unfortunately, npf(4) doesn't have all > the functionality we need to implement the configurations we use. > Consequently, it may be necessary to MP-ify pf(4) as well, as I suspect > that's easier than implementing its functionality in npf(4).
FreeBSD has taken that route, and after my ordeal with a netbsd-{7,8} pf router pair I am quite happy with the result. Cheerio, hauke -- Hauke Fath <ha...@espresso.rhein-neckar.de> Ernst-Ludwig-Straße 15 64625 Bensheim Germany