Mire, John wrote:
Would it make sense to rearrange the order of ipfw vs ipfilter so it's first in and last out so you could use ipfw just for that kind of utility to "screen" frags, so it's ipfw(in)->ipnat(in)->ipfilter(in)->ipfilter(out)->ipfw(out)
Ideally, you should be able to define the order yourself. Darren
