Hi,
ipfilter 3.3.2 is available, but -current (and 1.4.1) only have 3.2.10. 
(traceroute actually works over NAT in 3.2.11+).  What is the proper way
to update the in-kernel ipfilter?  Will the ipfilter2netbsd script still
work on an ipf 3.3.2 distribution?  I've looked at the code briefly and
it looks like the 3.3.2 distribution differs enough from our own that it
won't be a trivial matter of replace the old files with the new files. 
Any one have any experience with this?

Thanks,
	Rick

-- 
=========================================================================
Rick Byers                       University of Waterloo, Computer
Science
rickb@iaw.on.ca                              
http://www.iaw.on.ca/rickb/