>it might be useful insofar as people would not have to learn to use
>ipf in order to block their syslogd from receiving messages from
>unauthorized hosts, but it would have to simply drop all such
>messages.  making log entries about violations could lead to a denial
>of disk space attack.

	the patch is now in NetBSD-current.  it silently ignores syslog packets
	from rejected addresses, of course.

itojun