From owner-freebsd-net@FreeBSD.ORG  Wed Dec 15 08:45:46 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 542DA16A4CF; Wed, 15 Dec 2004 08:45:46 +0000 (GMT)
Received: from relay.bestcom.ru (relay.bestcom.ru [217.72.144.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 8175A43D46; Wed, 15 Dec 2004 08:45:45 +0000 (GMT)
	(envelope-from glebius@freebsd.org)
Received: from cell.sick.ru (root@cell.sick.ru [217.72.144.68])
	by relay.bestcom.ru (8.13.1/8.12.9) with ESMTP id iBF8jgaj089019
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL);
	Wed, 15 Dec 2004 11:45:43 +0300 (MSK)
	(envelope-from glebius@freebsd.org)
Received: from cell.sick.ru (glebius@localhost [127.0.0.1])
	by cell.sick.ru (8.12.11/8.12.8) with ESMTP id iBF8jgp6053764
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 15 Dec 2004 11:45:42 +0300 (MSK)
	(envelope-from glebius@freebsd.org)
Received: (from glebius@localhost)
	by cell.sick.ru (8.12.11/8.12.11/Submit) id iBF8jfYE053763;
	Wed, 15 Dec 2004 11:45:41 +0300 (MSK)
	(envelope-from glebius@freebsd.org)
X-Authentication-Warning: cell.sick.ru: glebius set sender to
	glebius@freebsd.org using -f
Date: Wed, 15 Dec 2004 11:45:40 +0300
From: Gleb Smirnoff <glebius@freebsd.org>
To: James <james@towardex.com>
Message-ID: <20041215084540.GB53509@cell.sick.ru>
Mail-Followup-To: Gleb Smirnoff <glebius@freebsd.org>,
	James <james@towardex.com>, Andre Oppermann <andre@freebsd.org>,
	Luigi Rizzo <rizzo@icir.org>, freebsd-net@freebsd.org,
	Max Laier <max@love2party.net>
References: <20041213124051.GB32719@cell.sick.ru>
	<20041214015603.A75019@xorpc.icir.org> <20041214060341.A77720@xorpc.icir.org>
	<41BEF746.E8362858@freebsd.org> <20041214063118.B77933@xorpc.icir.org>
	<41BF07A3.8F1F505E@freebsd.org> <20041214181231.GA80817@scylla.towardex.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
In-Reply-To: <20041214181231.GA80817@scylla.towardex.com>
User-Agent: Mutt/1.5.6i
X-Virus-Scanned: clamd / ClamAV version devel-20041013, clamav-milter version
	0.75l	on 127.0.0.1
X-Virus-Status: Clean
cc: Luigi Rizzo <rizzo@icir.org>
cc: Andre Oppermann <andre@freebsd.org>
cc: Max Laier <max@love2party.net>
cc: freebsd-net@freebsd.org
Subject: Re: per-interface packet filters [summary]
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Dec 2004 08:45:46 -0000

On Tue, Dec 14, 2004 at 01:12:31PM -0500, James wrote:
J> The way we have approached this in the past is to install /32 host routes
J> for each interface addr's and respective subnet and broadcast /32 addresses
J> into the kernel RIB, destined to lo0 interface. Place your per-interface
J> filter on 'lo0' interface and packets destined to router iteslf will be
J> subject to loopback filter before making it onto upper layer protocol.

I was thinking of this idea, too. So, it works?

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE