Date: Thu, 27 Jul 2006 15:30:48 -0500 From: "Christian S.J. Peron" <csjp@FreeBSD.org> To: Max Laier <max@love2party.net> Cc: freebsd-net@freebsd.org, andre@freebsd.org, Julian Elischer <julian@elischer.org> Subject: Re: [patch] RFC: allow divert from layer 2 ipfw (e.g. bridge) Message-ID: <44C92278.5000901@FreeBSD.org> In-Reply-To: <200607271346.12491.max@love2party.net> References: <44C7B5E2.5080001@elischer.org> <200607271346.12491.max@love2party.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Max Laier wrote: > On Wednesday 26 July 2006 20:35, Julian Elischer wrote: > >> This code is running on quite a few systems but in a very limited >> environment that may not test all possibilities.. >> >> Does anyone have comments or suggestions as to changes that I might make >> for checkin into generic FreeBSD? It was originally written for 4.x but >> with 6.x in mind. >> It is now running on 6.1 and seems to be ok so far. >> >> Certainly I am interested in hearing from Robert and Luigi and I am >> particularly interested in >> what people think on how this will handle locking/SMP difficulies. >> > > Instead of putting more special processing to every L2-entry point in the > system, I'd prefer if we could finally get round to L2 pfil hooks. That > would make it much easier to add such functionality in a common hook function > and use it everywhere. > > I agree with Max here, I think it's time we look at getting together pfil hooks for layer 2. I would be interested in doing the leg work here if you guys are willing to review it. -- Christian S.J. Peron csjp@FreeBSD.ORG FreeBSD Committer FreeBSD Security Team
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44C92278.5000901>