Reknamorken wrote:
] Is this a potential mechanism for maintaining state on a
] couple of VRRP'ed OpenBSD pf firewalls???

Connection/state table sharing between netfilter/iptables boxes is currently in the works. There was a BoF on it at the Ottawa Linux Kernel Summit this summer. I forget which dude is currently working on it, but its an active project. I believe people were saying "winter" or "spring" alot in reference to it..

That will enable active/active FWs, SGs & SLB.

- nick

RE: Slashdot | Black Ops of TCP/IP: Paketto Keiretsu 1.0 Release