Manuel Bouyer wrote:
My workaround is to use the 'age' keyword, with different timeouts for ssh and others:
OK but I don't want to do that... # sed 's+ *#.*++' ipf*.conf | sort | uniq | wc -l 645 Yes I know, this is a big firewall with lots of (real and VLAN) interfaces :-) Martti