Re: Rationale for BSD (I)PF rule order?

["Marcus J. Ranum" <mjr () ranum com>]

Holger Kipp wrote:
> Assume you have 3000+ rules on 12 interfaces and want to add another rule.

If you have a 3000+ rule 12 interface firewall you may as well
replace it with one of them newfangled "secure hubs"

mjr. 
---
Marcus J. Ranum                         http://www.ranum.com
Computer and Communications Security    mjr () ranum com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards