Re: Is it correct to think of interfaces vs routers as in "where the packet ends up going"?

Phil Whineray <[email protected]> Thu, 3 Jan 2019 18:41:00 +0000
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <20190103184100.GA12694@xps>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