>How does the ipfilter stuff in our kernel work with ipv6?  Or does it?

	ipfilter stuff is specific to IPv4, and it does not work for IPv6
	at all at this moment.

	I'm wondering how we should implement filtering code.  Existing
	codebase (ipfilter and ipfw) are very specific to IPv4.  One thing
	in my mind is more generic and protocol-independent packet classifier
	framework, for dropping packet (filtering), ALTQ, ipsec, and maybe
	wacky routing.  I hope to invest my cycle toward this direction
	in the near future.

itojun