Brandon Holland wrote:
> If Manuel sees this he's going to be angry :)
Yes, really, but the fact that this comes up every once in a while is
also a bit my fault - I put it on the To Do list on m0n0.ch now, with a
remark that this is not feasible until ipfilter 4.0 is out (classical
example, once more: aliases with 10 networks or hosts for both the
source and the destination of a single rule - now translate that into
simple ipfilter rules without native alias support).