Date: Fri, 31 Jan 2003 14:16:06 -0800 From: "Crist J. Clark" <crist.clark@attbi.com> To: Claus Guttesen <cguttesen@yahoo.dk> Cc: stable@freebsd.org Subject: Re: IPF & IPFW Message-ID: <20030131221606.GC30498@blossom.cjclark.org> In-Reply-To: <20030131111050.93999.qmail@web14101.mail.yahoo.com> References: <03Jan31.190830nzdt.119046@homer.fire.org.nz> <20030131111050.93999.qmail@web14101.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 31, 2003 at 12:10:50PM +0100, Claus Guttesen wrote: > Hi. > > > I am writing an app to do pre-pay internet and are > > using a combination > > of ipf and ipfw. I stupidly assumed that ipfw ran > > before ipf, of course > > its the other way around. This has put a hurdle in > > You may wish to read > http://home.earthlink.net/~jaymzh666/ipf/IPFfreebsd.html#14. > This explains in what order ipf and ipfw is loaded. > > If you want to let ipfw to process the ip-packet > first, you can remove ipfilter from the kernel and > load it as a module instead. This should solve your > problem. Nuh-uh. The hooks for ipf(8) and ipfw(8) always are in the same place in ip_input.c and ip_output.c. The order of loading modules has no impact. To the original poster, there is nothing you can do short of hacking ip_input.c and ip_output.c to fit your designs. But you are perfectly free to do it if you'd like. (Ain't open source and BSD licenses great?) -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030131221606.GC30498>