>> IMO, its too much of a security hole to have a >> gui to manage your pf.conf. >> > so I consider a GUI or a shell as a security > feature as it prevents the user <snip> Note that I said its a security hole to have a _gui_ for ruleset management. Using a command line or shell tool is a different story. -Karsten