Manuel Kasper wrote:
> - adding support for address/network groups in firewall rules (via 
> ipfilter's ippool feature)

Everything else sounds great, but if this is what I think it is, this is 
really awesome!  The only thing that had me kind of thinking about 
pfSense is the ability to define 1 rule that says:
	allow outgoing DNS to {list of upstream DNS servers}

Right now with M0n0, as far as I know, that is {count of upstream DNS 
servers} rules...

Thanks!
JP
----------------------------|:::======|-------------------------------
JP Vossen, CISSP            |:::======|      http://bashcookbook.com/
My Account, My Opinions     |=========|      http://www.jpsdomain.org/
----------------------------|=========|-------------------------------
"Microsoft Tax" = the additional hardware & yearly fees for the add-on
software required to protect Windows from its own poorly designed and
implemented self, while the overhead incidentally flattens Moore's Law.