Re: ipfilter (was: RE: Introduction)

1999-06-21 Thread Luigi Rizzo
> > this might ease life to those who want to replace ipfw with ipfilter > > for dummynet or similar things, if nothing else. > > Thank you, Luigi. Could you please help me with some basics? ... what i do in dummynet is to queue the packet (wheter it comes from ip_input() or ip_output() makes no

RE: ipfilter (was: RE: Introduction)

1999-06-20 Thread Constantine Shkolny
On Sunday, June 20, 1999 7:22 AM, Luigi Rizzo [SMTP:lu...@labinfo.iet.unipi.it] wrote: > > This means that IP filters need to grab some of IP packets, process > > them on a specialized prosessor and then re-inject them into the IP > > packet stream. That is, the filter may decide to convert the pa

Re: ipfilter (was: RE: Introduction)

1999-06-20 Thread Luigi Rizzo
> This means that IP filters need to grab some of IP packets, process > them on a specialized prosessor and then re-inject them into the IP > packet stream. That is, the filter may decide to convert the packet, > but it doesn't have it ready-to-go when it has to return. However, > it may have it re

ipfilter (was: RE: Introduction)

1999-06-19 Thread Constantine Shkolny
Hi All, I'm now analyzing ipfilter in 3.2 and our goal is to port our IPSec/firewall. I'm still in the beginning of reading the code so, at this time, I can't yet tell how nice it fits our needs. I just have some concerns which I'd like the people who are going to re-design the ipfilter to hear. I