Date: Mon, 13 May 2002 13:43:53 +0200 (SAT) From: John Hay <jhay@icomtek.csir.co.za> To: phk@critter.freebsd.dk (Poul-Henning Kamp) Cc: luigi@FreeBSD.org (Luigi Rizzo), cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/net if_ethersubr.c src/sys/netinet ip_dummynet.c ip_dummynet.h Message-ID: <200205131143.g4DBhrH38559@zibbi.icomtek.csir.co.za> In-Reply-To: <13232.1021289258@critter.freebsd.dk> from Poul-Henning Kamp at "May 13, 2002 01:27:38 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> >... > >> But couldn't you easily add a new rulechain for the ethernet > >> rules ? That seems both clean and simple to me ? > > > >yes, in fact this is probably what i will end up doing. > >Just trying to figure out what to put in the ip_fw struct to > >instruct the kernel to link the rule in the other chain. > > > >> Besides, if we want to clean up, 5.0 is the time to do it... > > > >there is more to that. After looking at how bloated the code has > >become, i have definitely come to the conclusion that we have two > >choices here (not mutually exclusive): > > Even better yet: > > + Make the ipfw program a "ipfw rule to C compiler" and > kldload the compiled C code. Would one still be able to add or remove a single rule then? That is a very usefull feature for me. John -- John Hay -- John.Hay@icomtek.csir.co.za / jhay@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200205131143.g4DBhrH38559>