Date: Fri, 3 Dec 2004 15:48:00 +0100 From: Max Laier <max@love2party.net> To: freebsd-net@freebsd.org Cc: Petr Holub <hopet@ics.muni.cz> Subject: Re: pf and bridging Message-ID: <200412031548.02444.max@love2party.net> In-Reply-To: <00ea01c4d89f$273c9d20$2603fb93@KLOBOUCEK> References: <00ea01c4d89f$273c9d20$2603fb93@KLOBOUCEK>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart6298269.uz0DLbLyzS Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 02 December 2004 19:45, Petr Holub wrote: > Hi all, > > I wonder if it is possible to use the new pf firewall together with > bridging as it is possible to use it with ipf and ipfw. Unfortunately the PFIL_HOOKS in bridge.c don't work too well for pf (or ipf= =20 for the same reason) thus you cannot use stateful filtering. There is an=20 ongoing discussion on freebsd-pf@ that talks about the details: http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000621.html http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000625.html http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000631.html =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart6298269.uz0DLbLyzS Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBsHyiXyyEoT62BG0RAqVaAJ4xEdKCqI8KLH+HYK6i49gSTbM/2QCdEUd0 ClWw1Fc3rt4M3oEl/144xpE= =2XIf -----END PGP SIGNATURE----- --nextPart6298269.uz0DLbLyzS--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412031548.02444.max>