I also throw my nomination to the floor for the inclusion of Darren
   Reeds' excellent ip filter stuff. OK, the thing is a loadable
   module. Great. Now let me just patch each kernel source tree with
   the #ifdef surrounded changes... Another example of a member or
   core saying "I don't think this solution is elegant enough" without
   coming up with a timely alternative. I remember Darren offering
   the filter code last *SUMMER* guys. Where is the "official/pure/perfect"
   version from cofe ? Hello ? Anyone there ?

Let's review some facts here:

1) There were at least three different in-kernel filtering packages
mentioned, each reputed to be better than (or at least as good as) the
others.

2) This software is only of use to a small subset of people, namely
those who do or would use NetBSD for routing.

3) None of those people did a bake-off of the various packages.

4) What I said amounted to `This is the way I would like it done.',
*not* `This is the One True Way (tm) of doing it, and none other is
acceptable.'

If you'd like it put in, then I suggest you do the ground work to show
that it *should* be put in (at all, and rather than some other
package); that would be a much better use of time than flaming at us.