> Unfortunately, snort does not communicate with pf. If anyone HAS done this > sort of setup, please let everyone know. Not true. Snort can reactively reconfigure a pf firewall through the snortsam output plugin. www.snortsam.net ciao, chakl -- Olaf Schreck chakl@syscall.de syscall() Network Solutions, Berlin