anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer
I think someone sent me a link to an ng_ipfw_filter node once but I've lost it... (I think it was called ng_ipfw but that name is now taken by the netgraph/ipfw 'ipfw netgraph' packet divert option). Something that lets you do ipfw filtering on packets as they travel across a graph. As I said,I

Re: cvs commit: src/sys/contrib/dev/ath COPYRIGHT README ah.h ah_desc.h ah_devid.h ah_soc.h version.h src/sys/contrib/dev/ath/public alpha-elf.hal.o.uu alpha-elf.inc alpha-elf.opt_ah.h ap30.hal.o.uu a

2008-09-11 Thread Vladimir Grebenschikov
On Tue, 2008-09-09 at 17:24 +0100, Rui Paulo wrote: > On Mon, Sep 08, 2008 at 06:19:06PM +0400, Vladimir Grebenschikov wrote: > > On Wed, 2008-09-03 at 17:52 +0100, Rui Paulo wrote: > > > On Tue, Sep 02, 2008 at 11:08:00PM +0400, Vladimir Grebenschikov wrote: > > > > ? Thu, 28/08/2008 ? 00:22 +

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Bjoern A. Zeeb
On Thu, 11 Sep 2008, Julian Elischer wrote: Hi, I think someone sent me a link to an ng_ipfw_filter node once but I've lost it... (I think it was called ng_ipfw but that name is now taken by the netgraph/ipfw 'ipfw netgraph' packet divert option). Something that lets you do ipfw filtering on

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer
Bjoern A. Zeeb wrote: On Thu, 11 Sep 2008, Julian Elischer wrote: Hi, I think someone sent me a link to an ng_ipfw_filter node once but I've lost it... (I think it was called ng_ipfw but that name is now taken by the netgraph/ipfw 'ipfw netgraph' packet divert option). Something that lets yo

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Bjoern A. Zeeb
On Fri, 12 Sep 2008, Bjoern A. Zeeb wrote: On Thu, 11 Sep 2008, Julian Elischer wrote: Hi, I think someone sent me a link to an ng_ipfw_filter node once but I've lost it... (I think it was called ng_ipfw but that name is now taken by the netgraph/ipfw 'ipfw netgraph' packet divert option).

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Eugene Grosbein
On Thu, Sep 11, 2008 at 11:12:29PM -0700, Julian Elischer wrote: > that one allows ipfw to send things to netgraph. I want one > to allow a netgraph graph to filter things with ipfw... ng_bpf? not exactly ipfw filtering, but filtering :-) Eugene Grosbein _

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Andrew Snow
I think what you ask can be done by: 1. sending the packet through ng_mbuf to tag it 2. sending it to ng_ipfw to be sent through IPFW 3. use IPFW rules to operate on packets with the particular tag you attached in #1 4. as the final IPFW rule, pass the packet back in to netgraph via a 'netgra

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Julian Elischer
Eugene Grosbein wrote: On Thu, Sep 11, 2008 at 11:12:29PM -0700, Julian Elischer wrote: that one allows ipfw to send things to netgraph. I want one to allow a netgraph graph to filter things with ipfw... ng_bpf? not exactly ipfw filtering, but filtering :-) No it needs to be ifpw for the j

Re: anyone have a netgraph node to do ipfw filtering?

2008-09-11 Thread Eugene Grosbein
Julian Elischer wrote: > >> that one allows ipfw to send things to netgraph. I want one > >> to allow a netgraph graph to filter things with ipfw... > > > > ng_bpf? not exactly ipfw filtering, but filtering :-) > > No it needs to be ifpw for the job I'm doing..there is already a lot > of code tha