Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Aug 2002 21:36:28 +0400
From:      "Sergey Mokryshev" <mokr@mokr.net>
To:        "David W. Chapman Jr." <dwcjr@inethouston.net>
Cc:        <cjclark@alum.mit.edu>, <current@FreeBSD.ORG>
Subject:   Re: question about ipl.ko
Message-ID:  <0b8901c24939$717d0f20$0f0010ac@office.tersys.ru>
References:  <20020816130147.GA39907@studnet.sk> <20020816193854.GC47465@blossom.cjclark.org> <062201c2475f$9f19ab40$0f0010ac@office.tersys.ru> <20020820181519.GA69240@blossom.cjclark.org> <0ab501c2492d$bc90fe10$0f0010ac@office.tersys.ru> <20020821162631.GA38043@leviathan.inethouston.net> <0b6601c24934$9dcf97f0$0f0010ac@office.tersys.ru> <20020821170743.GC38043@leviathan.inethouston.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello, David!
You wrote to "Sergey Mokryshev" <mokr@mokr.net> on Wed, 21 Aug 2002
12:07:43 -0500:

 >> No, ipl.ko is not broken. It depends on pfil(9).

 DWC> Shouldn't we try to make a pfil.ko that ipl.ko depends on then?

I make a brief look into code (I am not a kernel hacker nor a
programmer).

There are a few files with PFIL_HOOKS-dependant #ifdefs, but it is
strongly
tied with the code.

/sys/net/bridge.c
/sys/netinet/ip_input.c
/sys/netinet/ip_output.c
/sys/netinet6/ip6_forward.c
/sys/netinet6/ip6_input.c
/sys/netinet6/ip6_output.c

Darren Reed has some pieces of code on his site, but I
did not read it.
ftp://coombs.anu.edu.au/pub/net/ip-filter/pfil-1.26.tar.gz

According to pfil(9) manual
-----------
BUGS
     The current pfil implementation will need changes to suit a
threaded ker-
     nel model.
-----------

May be this is the reason not to make it default.

Sincerely yours,
Sergey Mokryshev.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0b8901c24939$717d0f20$0f0010ac>