> Now having implemented NetBSD as an internet gateway (whichs works royally well
> besides the following problem), I've come across ipfilter and how it really isn't
> that great. The natural step in this case is to try pf.

	rule "(interface)" is slower than other directive (like writing down
	IP address directly), IIRC.

itojun


> nat on $ext_if from !($ext_if) -> ($ext_if:0)