Date: Wed, 15 Dec 2004 03:49:09 -0500 From: James <james@towardex.com> To: Gleb Smirnoff <glebius@freebsd.org>, Andre Oppermann <andre@freebsd.org>, Luigi Rizzo <rizzo@icir.org>, freebsd-net@freebsd.org, Max Laier <max@love2party.net> Subject: Re: per-interface packet filters [summary] Message-ID: <20041215084909.GA44268@scylla.towardex.com> In-Reply-To: <20041215084540.GB53509@cell.sick.ru> References: <20041213124051.GB32719@cell.sick.ru> <20041214015603.A75019@xorpc.icir.org> <20041214060341.A77720@xorpc.icir.org> <41BEF746.E8362858@freebsd.org> <20041214063118.B77933@xorpc.icir.org> <41BF07A3.8F1F505E@freebsd.org> <20041214181231.GA80817@scylla.towardex.com> <20041215084540.GB53509@cell.sick.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 15, 2004 at 11:45:40AM +0300, Gleb Smirnoff wrote: > On Tue, Dec 14, 2004 at 01:12:31PM -0500, James wrote: > J> The way we have approached this in the past is to install /32 host routes > J> for each interface addr's and respective subnet and broadcast /32 addresses > J> into the kernel RIB, destined to lo0 interface. Place your per-interface > J> filter on 'lo0' interface and packets destined to router iteslf will be > J> subject to loopback filter before making it onto upper layer protocol. > > I was thinking of this idea, too. So, it works? It works indeed. If folks want me to, I'll provide patches to ip_fastfwd.c after christmas-new-year break. (I have too much stuff on my plate right now) Just to note, the patch will _not_ touch ip_input.c. Receive path should not even exist on a host system, only on a router running hard core routing code (aka ip_fastforward() being the routing code). -J -- James Jun TowardEX Technologies, Inc. Technical Lead Boston IPv4/IPv6 Web Hosting, Colocation and james@towardex.com Network design/consulting & configuration services cell: 1(978)-394-2867 web: http://www.towardex.com , noc: www.twdx.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041215084909.GA44268>