Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 May 2013 14:29:52 +0200
From:      peter@bsdly.net (Peter N. M. Hansteen)
To:        freebsd-pf@freebsd.org
Subject:   Re: packet tagging
Message-ID:  <878v3obakf.fsf@deeperthought.bsdly.net>
In-Reply-To: <1368097169.74234.YahooMailNeo@web162701.mail.bf1.yahoo.com> (Nomad Esst's message of "Thu, 9 May 2013 03:59:29 -0700 (PDT)")
References:  <1368097169.74234.YahooMailNeo@web162701.mail.bf1.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Nomad Esst <noname.esst@yahoo.com> writes:

> Should the system act as a bridge in order to do the tagging or is it
> (bridge) just used to do the tagging regardless of the system rule?

You can tag packets on incoming and filter on the tags later in your
ruleset in non-bridge configurations too. But of course bridges have
their own tagging and filtering facilities that may be combined with PF
features.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?878v3obakf.fsf>