On Fri, May 12, 2006 at 08:31:16AM -0400, Steven M. Bellovin wrote:
> On Fri, 12 May 2006 09:45:26 +0200, Pavel Cahyna <pavel@NetBSD.org> wrote:
> > I would try -current. You should be able to simply boot the -current
> > kernel with the installation you have now and see if there is an
> > improvement.
> > 
> Unless you're using ipfilter -- the userland tools for loading rules have
> to match the kernel version, as a rule.

IPfilter 4 was supposed to improve this situation. Was this goal met or
not?

Pavel