I was just wondering, uhm, m0n0wall currently (1.2b10) uses pf
(packetfilter), right? There's also ipf (IP Filter) in *BSD... I was
wondering why m0n0wall doesn't use ipf instead of pf! I don't know
why/if it should, just a question. Would it take much to rewrite
m0n0wall for ipf? Well, I guess it would if it used a different
syntax... Maybe a wrapper could be written for it (like a script.sh
file which took inputs and made ipf commands out of the inputs).
Would 'we' benefit from having ipf in m0n0wall instead of pf?