Re: OpenBSD Firewalls

[Mike Shaw <mshaw@wwisp.com>]

At 09:44 PM 10/1/2002 -0700, S9 wrote:
> > my rules are becoming very complex and I am afraid
> > of start making mistakes because of the complexity
> > of my rules.
>
>how complex? Even in large deployment scenarios,
>I've found ways to keep firewalls manageable
>one way or another by using preset interface
>security levels (a Cisco PIXish notion). Implementing
>it in pf is just a matter of default block statements.

Do you mind forwarding some cleansed examples?  I'm interested in the nuts 
and bolts of how you are doing this.

Thanks.
-Mike