From owner-freebsd-pf@FreeBSD.ORG  Wed Jul 20 17:20:17 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 881D116A41F
	for <freebsd-pf@freebsd.org>; Wed, 20 Jul 2005 17:20:17 +0000 (GMT)
	(envelope-from alex-bsd@yandex.ru)
Received: from mfront7.yandex.ru (mfront7.yandex.ru [213.180.200.38])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2B13343D45
	for <freebsd-pf@freebsd.org>; Wed, 20 Jul 2005 17:20:16 +0000 (GMT)
	(envelope-from alex-bsd@yandex.ru)
Received: from YAMAIL (mfront7.yandex.ru) by mail.yandex.ru
	id <S536787AbVGTRUN>; Wed, 20 Jul 2005 21:20:13 +0400
Date: Wed, 20 Jul 2005 21:20:13 +0400 (MSD)
From: "alex-bsd" <alex-bsd@yandex.ru>
Sender: alex-bsd@yandex.ru
Message-Id: <42DE87CD.000002.18833@mfront7.yandex.ru>
MIME-Version: 1.0
X-Mailer: Yamail [ http://yandex.ru ]
Errors-To: alex-bsd@yandex.ru
To: Lewis@Alumni.Duke.edu
X-Source-Ip: 83.237.59.80
Content-Type: text/plain;
  charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Cc: freebsd-pf@freebsd.org
Subject: Re: PF & BLOCK MP3 (AVI)
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: alex-bsd@yandex.ru
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jul 2005 17:20:17 -0000

I not absolutely understand, how we can play with Daniel.
In the work I do not use Linux. 
Many my friends use Linux as gateway.
Presence this function in IPTABLES is very convenient for them. 
This function IPTABLES is used by them enough for a long time, any problems connected with use of this opportunity at them was not observed.

The filtration mp3 files is used for economy of the traffic. 
Many managers and secretaries use Internet only for downloading mp3 and avi :) 
Check of a content is done by them only on the internal interface (check inquiry of the client)

Whether will be dangerous DoS attacks if check of a content will be used ONLY on the local interface?
I doubt that the secretary will start to attack gateway:) 

Instead of a bet, I wish to suggest to developers create a paid patch for realization of this opportunity.
It is ready to pay for it 50 $, IMHO I think not only I would buy a patch (In the sum it should turn out more than 500 $).

P.S. I hope my offer will not offend developers.