Andrew Brown writes:
> >Why not just enable each of the above and control it through packet
> >filter lists in IP Filter ?
> 
> yeah...but then the "generic" solution is replaced by a different set
> of filter rules for *everyone*

This is an option. This isn't required. You don't have to activate the 
sysctl. Do you have a problem with people who want a particular piece
of code that doesn't impact you having that code?

Perry