>> > > Right.  itojun imported pf into KAME today and started working on
>> > > the setkey part.  I haven't had time to catch up.
>> > I get the impression that itojun's email was both premature and not
>> > very well worded then, if you want to achieve the goals you're after.

	which portion seems premature?

	i'm working on multiple platforms in parallel, including:
	kame/freebsd4, kame/netbsd161, kame/openbsd33, openbsd-current,
	netbsd-current (call me crazy, if you want to).  progress of work
	differs by each of the platform.
	kame/netbsd161 now enjoys IPsec-and-PF integration, as forwarded,
	and i would like to integrate it into netbsd-current.

itojun