Re: ipfilter: keep state per-interface?

[Timo Buhrmester <fstd.lkml%gmail.com@localhost>]

> FYI: from NetBSD's NPF `man 5 npf.conf'
> | Stateful packet inspection is enabled using `stateful' or
> | `stateful-ends' keywords.  The former creates a state which is
> | uniquely identified by a 5-tuple (source and destination IP
> | addresses, port numbers and an interface identifier).  The latter
> | excludes the interface identifier and must be used with precaution.
Thanks!  I guess I'll use it as an excuse to learn some npf :-)