--xe2geHXJg22At20M
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Aug 11, 2005 at 07:07:10PM +0200, Peter Postma wrote:
> So, we should start pf after the network is up, then everything should
> be fine. Please try the attached patch.

that's fundamentally wrong approach, though.  starting packet filter
after the network is up leaves window for possible attacks from the
network.

regards,

--=20
-- Lubomir Sedlacik <salo@{NetBSD,Xtrmntr,silcnet}.org>   --

--xe2geHXJg22At20M
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (NetBSD)

iD8DBQFC+4cLiwjDDlS8cmMRAooUAJ9eEzph3G0yA3N2jFEtu3deUfDnxQCbBW7L
BSAGW+VUBJsEe9Si+eVches=
=EkTo
-----END PGP SIGNATURE-----

--xe2geHXJg22At20M--