Subject: Re: Should loose source routing be enabled if not IPFORWARDING?
To: None <>
From: Charles M. Hannum <>
List: current-users
Date: 12/15/1994 13:12:43
   I prefer the approach like the BSDI firewall kit where you install 
   filter expressions into the kernel.

Yes, and I would go further and say that it should use the existing
bpf filter mechanism, to avoid duplicating code.  If it needs to be
extended, then so be it.