Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 07 Jan 2000 19:15:58 +0100
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        Luigi Rizzo <luigi@info.iet.unipi.it>
Cc:        Patrick Bihan-Faou <patrick@mindstep.com>, freebsd-current@FreeBSD.org
Subject:   Re: ipfw optimizations 
Message-ID:  <6777.947268958@critter.freebsd.dk>
In-Reply-To: Your message of "Fri, 07 Jan 2000 19:13:00 %2B0100." <200001071813.TAA05606@info.iet.unipi.it> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <200001071813.TAA05606@info.iet.unipi.it>, Luigi Rizzo writes:
>> I still think we should split the current "one huge list of rules"
>> into several lists:
>
>> 	Two lists per interface:
>> 		one list of rules for inbound packets
>> 		one list of rules for outbound packets
>> 
>> 	Two lists for the IP stack:
>> 		one list of rules for incoming packets
>> 		one list of rules for outgoing packets
>> 
>> 	One list for forwarding of packets.
>
>aren't these three classes combined in some H-shaped way ?

Could be, the forwarding branch could be a good place to
hook up natd(8) for instance...

--
Poul-Henning Kamp             FreeBSD coreteam member
phk@FreeBSD.ORG               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6777.947268958>