From owner-freebsd-net@FreeBSD.ORG Fri Sep 12 06:48:50 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EDDFD106564A for ; Fri, 12 Sep 2008 06:48:50 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outN.internet-mail-service.net (outn.internet-mail-service.net [216.240.47.237]) by mx1.freebsd.org (Postfix) with ESMTP id CC7908FC12 for ; Fri, 12 Sep 2008 06:48:50 +0000 (UTC) (envelope-from julian@elischer.org) Received: from idiom.com (mx0.idiom.com [216.240.32.160]) by out.internet-mail-service.net (Postfix) with ESMTP id AD19E2376; Thu, 11 Sep 2008 23:48:50 -0700 (PDT) Received: from julian-mac.elischer.org (localhost [127.0.0.1]) by idiom.com (Postfix) with ESMTP id 5B0DE2D600E; Thu, 11 Sep 2008 23:48:50 -0700 (PDT) Message-ID: <48CA10D2.4040807@elischer.org> Date: Thu, 11 Sep 2008 23:48:50 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.16 (Macintosh/20080707) MIME-Version: 1.0 To: Eugene Grosbein References: <48C97AB3.6040907@elischer.org> <20080912054832.Q65801@maildrop.int.zabbadoz.net> <48CA084D.1050406@elischer.org> <20080912061628.GA46340@svzserv.kemerovo.su> In-Reply-To: <20080912061628.GA46340@svzserv.kemerovo.su> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "Bjoern A. Zeeb" , ipfw@freebsd.org, FreeBSD Net Subject: Re: anyone have a netgraph node to do ipfw filtering? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Sep 2008 06:48:51 -0000 Eugene Grosbein wrote: > On Thu, Sep 11, 2008 at 11:12:29PM -0700, Julian Elischer wrote: > >> that one allows ipfw to send things to netgraph. I want one >> to allow a netgraph graph to filter things with ipfw... > > ng_bpf? not exactly ipfw filtering, but filtering :-) > No it needs to be ifpw for the job I'm doing..there is already a lot of code that manipulate ipfw rules that I want to reuse. (heavy use of tables etc.).