From owner-freebsd-questions@FreeBSD.ORG Wed Dec 28 13:45:08 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7A35016A41F for ; Wed, 28 Dec 2005 13:45:08 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail4.sea5.speakeasy.net (mail4.sea5.speakeasy.net [69.17.117.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1557743D55 for ; Wed, 28 Dec 2005 13:45:07 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 20719 invoked from network); 28 Dec 2005 13:45:07 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail4.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 28 Dec 2005 13:45:07 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id A641A28423; Wed, 28 Dec 2005 08:45:06 -0500 (EST) Sender: lowell@be-well.ilk.org To: Aaron Peterson References: <95550eab0512270731v31303cfbw9889f0e311872a5c@mail.gmail.com> From: Lowell Gilbert Date: 28 Dec 2005 08:45:06 -0500 In-Reply-To: <95550eab0512270731v31303cfbw9889f0e311872a5c@mail.gmail.com> Message-ID: <44acelnxnh.fsf@be-well.ilk.org> Lines: 18 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: FreeBSD Questions Subject: Re: pf, pfil hooks and if_bridge X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: FreeBSD Questions List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Dec 2005 13:45:08 -0000 Aaron Peterson writes: > I was reading about the new if_bridge driver, and the ability of any > packet filter to interface with it that uses pfil hooks. But I can't > seem to find any documentation that says whether pf is such a packet > filter? Would someone enlighten me if pf is useable with the new > if_bridge driver? $ grep 'pfil\.h' /usr/scratch/ncvs/src/sys/contrib/pf/*/* /usr/scratch/ncvs/src/sys/contrib/pf/net/pf_ioctl.c,v:#include $ So, the answer is "yes." -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org/~lowell/