PF and a feauture I requested weeks ago

[van Helsing <vh@helith.net>]

PFSYNC is a usefull feauture of PF but it has one big disadvantage:
I need a direct cable connection to the other PC.

The only way to sync. all FWs in my VPN is that I've a script wich
noticed when the PF.conf has changed (e.g. because SNORT) and wich login
all the other Servers/FWs replace the PF.conf and rebooting the FW.

Is there any solution wich allow PFSYNC to send the SYNC-Packetes
through an encrypted connection (SSH/SSL?) to other systems?
I think such a solution is easy to include because there could be a
host-authentication with the SSH-Keys.

Because Theo is working for OpenBSD and OpenSSH such a solution could
maybe easy integrated in the new release of OpenBSD.

Just a question because I don't know for now a system wich enable me to
do that easily.
Because if I wanna block an IP I wanna block them net-wide at ALL computers.

vh

[demime 0.98d removed an attachment of type application/pgp-signature]