Re: pf fastroute tag removal reviewers needed

2016-10-01 Thread Franco Fichtner
Hi Kristof, > On 28 Sep 2016, at 3:36 PM, Kristof Provost wrote: > > On 28 Sep 2016, at 13:53, Franco Fichtner wrote: >> The main culprit of pfil not working correctly is pf's >> route-to and reply-to (and the tag formerly known as fastroute) >> as they would call if_output directly on the ifnet

Re: pf fastroute tag removal reviewers needed

2016-09-28 Thread Kristof Provost
On 28 Sep 2016, at 13:53, Franco Fichtner wrote: The main culprit of pfil not working correctly is pf's route-to and reply-to (and the tag formerly known as fastroute) as they would call if_output directly on the ifnet and consume their packets this way. That transmit code is also copied from if_

pf fastroute tag removal reviewers needed

2016-09-28 Thread Franco Fichtner
Hi all, The review can be found here: https://reviews.freebsd.org/D8058 The larger motivation is to start work to align pf with pfil packet flow in order to make pf and ipfw more useful in combination with each other as e.g. pf offers powerful policy- routing and ipfw offers a multitude of dummy