Jonathan Stone writes:
> 
> Executive summary:
> 
> The [sic] fix in NetBSD's ip_fil is perceived by security-weenies
> as a security flaw.

Actually, as it turns out, I was being stupid. The filtering is
activated before the interfaces are configured, thus assuring that
there will not be a problem.

Perry