anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer

I think someone sent me a link to an ng_ipfw_filter node once
but I've lost it...

(I think it was called ng_ipfw but that name is now taken by the
netgraph/ipfw 'ipfw netgraph' packet divert option).

Something that lets you do ipfw filtering on packets as they
travel across a graph.

As I said,I've seen one but lost it...

Julian


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: cvs commit: src/sys/contrib/dev/ath COPYRIGHT README ah.h ah_desc.h ah_devid.h ah_soc.h version.h src/sys/contrib/dev/ath/public alpha-elf.hal.o.uu alpha-elf.inc alpha-elf.opt_ah.h ap30.hal.o.uu a

2008-09-11 Thread Vladimir Grebenschikov
On Tue, 2008-09-09 at 17:24 +0100, Rui Paulo wrote:
> On Mon, Sep 08, 2008 at 06:19:06PM +0400, Vladimir Grebenschikov wrote:
> > On Wed, 2008-09-03 at 17:52 +0100, Rui Paulo wrote:
> > > On Tue, Sep 02, 2008 at 11:08:00PM +0400, Vladimir Grebenschikov wrote:
> > > > ? Thu, 28/08/2008 ? 00:22 +, Rui Paulo ?:
> > > > > rpaulo  2008-08-28 00:22:59 UTC
> > > > 
> > > > 
> > > > After that commit my wireless stop work:
> > > 
> > > Can you tell us your ath mac+phy rev?
> > 
> > ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413,
> > RF5413)
> > ath0:  mem 0xedf0-0xedf0 irq 17 at device 0.0 on
> > pci3
> > ath0: [ITHREAD]
> > ath0: WARNING: using obsoleted if_watchdog interface
> > ath0: mac 10.3 phy 6.1 radio 10.2
> 
> I have a 5212 too and the problem is now fixed in HEAD. Please update.

Yes, it works now, thank you.

> Thanks,
-- 
Vladimir B. Grebenschikov
[EMAIL PROTECTED]
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Bjoern A. Zeeb

On Thu, 11 Sep 2008, Julian Elischer wrote:

Hi,


I think someone sent me a link to an ng_ipfw_filter node once
but I've lost it...

(I think it was called ng_ipfw but that name is now taken by the
netgraph/ipfw 'ipfw netgraph' packet divert option).

Something that lets you do ipfw filtering on packets as they
travel across a graph.

As I said,I've seen one but lost it...


I could be wrong but did you mean?
http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netgraph/ng_ipfw.c

--
Bjoern A. Zeeb  Stop bit received. Insert coin for new game.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer

Bjoern A. Zeeb wrote:

On Thu, 11 Sep 2008, Julian Elischer wrote:

Hi,


I think someone sent me a link to an ng_ipfw_filter node once
but I've lost it...

(I think it was called ng_ipfw but that name is now taken by the
netgraph/ipfw 'ipfw netgraph' packet divert option).

Something that lets you do ipfw filtering on packets as they
travel across a graph.

As I said,I've seen one but lost it...


I could be wrong but did you mean?
http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netgraph/ng_ipfw.c




no that's the one I refer to in themail wiich is the inverse of what I 
want



that one allows ipfw to send things to netgraph. I want one
to allow a netgraph graph to filter things with ipfw...


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Bjoern A. Zeeb

On Fri, 12 Sep 2008, Bjoern A. Zeeb wrote:


On Thu, 11 Sep 2008, Julian Elischer wrote:

Hi,


I think someone sent me a link to an ng_ipfw_filter node once
but I've lost it...

(I think it was called ng_ipfw but that name is now taken by the
netgraph/ipfw 'ipfw netgraph' packet divert option).

Something that lets you do ipfw filtering on packets as they
travel across a graph.

As I said,I've seen one but lost it...


I could be wrong but did you mean?


baeh, ignore this...

--
Bjoern A. Zeeb  Stop bit received. Insert coin for new game.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Eugene Grosbein
On Thu, Sep 11, 2008 at 11:12:29PM -0700, Julian Elischer wrote:

> that one allows ipfw to send things to netgraph. I want one
> to allow a netgraph graph to filter things with ipfw...

ng_bpf? not exactly ipfw filtering, but filtering :-)

Eugene Grosbein
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Andrew Snow



I think what you ask can be done by:

1. sending the packet through ng_mbuf to tag it
2. sending it to ng_ipfw to be sent through IPFW
3. use IPFW rules to operate on packets with the particular tag you 
attached in #1
4. as the final IPFW rule, pass the packet back in to netgraph via a 
'netgraph' IPFW rule.


I have not tried this, no idea if it would work

Best of luck! :-)


- Andrew
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer

Eugene Grosbein wrote:

On Thu, Sep 11, 2008 at 11:12:29PM -0700, Julian Elischer wrote:


that one allows ipfw to send things to netgraph. I want one
to allow a netgraph graph to filter things with ipfw...


ng_bpf? not exactly ipfw filtering, but filtering :-)



No it needs to be ifpw for the job I'm doing..there is already a lot 
of code that manipulate ipfw rules that I want to reuse.

(heavy use of tables etc.).




___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Eugene Grosbein
Julian Elischer wrote:

> >> that one allows ipfw to send things to netgraph. I want one
> >> to allow a netgraph graph to filter things with ipfw...
> >
> > ng_bpf? not exactly ipfw filtering, but filtering :-)
> 
> No it needs to be ifpw for the job I'm doing..there is already a lot
> of code that manipulate ipfw rules that I want to reuse.
> (heavy use of tables etc.).

I think there is no such node at present, I did some search recently.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"