Excuse me, but could anyone tell me what BPF and firewalling do have in
common?

It was my understanding (verified by just looking into the latest version
of some ethernet driver) that BPF only allows you to spy at packets from
user level programs which might reduce the number of packets by specifying
a filter. There is no way (I can see) that allows you by use of BPF to
request that the kernel drop a packet.

Am I totally out here?
--
ws@TooLs.DE     (Wolfgang Solfrank, TooLs GmbH) 	+49-228-985800