On Wed, Nov 10, 2010 at 01:45:16PM +0100, Tor Houghton wrote:
quoted text
> May I ask whether or not "per user" ownership (or permission to update) a
> table is/will be possible?
> 
> I am pondering the best mechanism for a  non-root process to add/remove
> addresses to a table.

You can look at sysutils/tabled in ports, which provides this
functionality (permissions would be controlled by the filesystem
permissions on the fifo)

I don't think we'll be making /dev/pf accessible by non-root processes
any time soon.