> pfil was originally designed to be network-independant, not just for IP..
> IP is just the only implemented filter.  it is probably an OK idea to add
> new types for arp (i like your names) -- i originally envisioned pfil
> hooks being added across much of the network stack..

Cool - I'll code up the arp one soon and post it.  Thanks for the info ;o)


Mike.