Date: Tue, 4 Nov 2014 11:02:50 -0800 From: Luigi Rizzo <rizzo@iet.unipi.it> To: Evandro Nunes <evandronunes12@gmail.com> Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Subject: Re: netmap-ipfw on em0 em1 Message-ID: <CA%2BhQ2%2BhAJZk-Y1Yw2xmHmxSMHpFN_byX94Bq33-th2vrp7q2JA@mail.gmail.com> In-Reply-To: <CAG4HiT4KHG%2Bb2um6-p4szWio8qmxN%2BadO5hO9J5UGPmsa%2BZC5g@mail.gmail.com> References: <CAG4HiT4KHG%2Bb2um6-p4szWio8qmxN%2BadO5hO9J5UGPmsa%2BZC5g@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
=E2=80=8Bthe user space netmap-ipfw only supports two interfaces, The hard problem in moving to 3+ interfaces is not much the code but deciding where to send a packet once it has passed the filter. Basically, passing things through the kernel stack is simple but performance is going to be no better than with the standard firewall (except for much better behaviour in blocking incoming attacks). cheers luigi On Tue, Nov 4, 2014 at 5:56 AM, Evandro Nunes <evandronunes12@gmail.com> wrote: > hello, > I am trying to do some basic stateless filtering with netmap-ipfw. > > what i have running is: > > ./kipfw em1 em2 lo0 > > and when i do ipfw/ipfw show: > > ipfw/ipfw show > connected to 127.0.0.1:5555 > nalloc 2248 nbytes 136 ptr 0x0 > 00100 0 0 allow ip from any to any via lo0 > 65535 0 0 allow ip from any to any > > it's not counting any packet, including loopback > > i have seem people using something similar but with ix(4) driver, what I = am > doing wrong? > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 -----------------------------------------+------------------------------- Prof. Luigi RIZZO, rizzo@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL +39-050-2211611 . via Diotisalvi 2 Mobile +39-338-6809875 . 56122 PISA (Italy) -----------------------------------------+-------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BhQ2%2BhAJZk-Y1Yw2xmHmxSMHpFN_byX94Bq33-th2vrp7q2JA>