On Thu, Nov 08, 2001 at 03:38:11PM -0800, Archie Cobbs wrote:
> Crist J. Clark writes:
> > The issue may be that you wish to make a decision on the packet in
> > later rules. For example, someone might wish to 'tee' all traffic to
> > and from a certain machine to some unspecified traffic monitoring
> > program listening on the divert socket. However, all of the traffic
> > too and from that IP address may or may not be allowed by the security
> > policy. With 'tee' as it exists, one cannot catch _all_ of the traffic
> > (whether or not allowed by policy) and still apply policy.
You can implement the above by replacing all terminal actions
(accept or deny) with "tee" and "divert" statements, respectively.
cheers
luigi
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
