In message <200309082250.h88Mo1Ae014803@guild.plethora.net>, Peter Seebach writ
es:
> Between this and the setusercontext() stuff, this is all the cool
>login stuff that I miss from BSD/OS, which is what *I* wanted.  There are
>still a few BSD/OS features I miss, and I don't know whether we can
>ever have them, but at least it's progress.
>
>(For the curious:  ipfw, which is not in any way related to the FreeBSD
>gizmo of the same name, and the boot.default/boot.define stuff allowing
>all sorts of magical kernel tweaking to be stored in nice editable text
>files.)

Let me second that.  BSDi's IP filtering gives you much finer control 
over what is passed, with (to me) more intuitive semantics.  And the 
boot.default stuff was extremely useful to me when dealing with some of 
the quirks of IBM Thinkpad booting.

		--Steve Bellovin, http://www.research.att.com/~smb