From owner-freebsd-pf@FreeBSD.ORG  Sun Jan  1 19:55:21 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2207816A420;
	Sun,  1 Jan 2006 19:55:21 +0000 (GMT)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from lon-mail-4.gradwell.net (lon-mail-4.gradwell.net
	[193.111.201.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9D1DB43D6A;
	Sun,  1 Jan 2006 19:55:11 +0000 (GMT)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from 88-105-199-248.dynamic.dsl.as9105.com ([88.105.199.248]
	helo=vaio)
	by lon-mail-4.gradwell.net with esmtp (Gradwell gwh-smtpd 1.207) id
	43b8339d.7f9a.111; Sun,  1 Jan 2006 19:55:09 +0000
	(envelope-sender <Greg.Hennessy@nviz.net>)
From: "Greg Hennessy" <Greg.Hennessy@nviz.net>
To: "'Gleb Smirnoff'" <glebius@freebsd.org>,
	"'?ukasz Bromirski'" <lbromirski@mr0vka.eu.org>
Date: Sun, 1 Jan 2006 19:54:56 -0000
Message-ID: <000f01c60f0d$3e69f240$0201a8c0@vaio>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcYO/ZcHkAdLaRSQRFCbqnHXUGcjkAADsyWg
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
In-Reply-To: <20060101175800.GP42629@FreeBSD.org>
Cc: freebsd-pf@freebsd.org
Subject: RE: [feature] ipfw verrevpath/versrcreach?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Jan 2006 19:55:21 -0000

 
> Implementing this feature is very easy. The code that does 
> this check is only a few lines. You can just copy and paste code from
> ipfw(4) and add new keywords to pf(4). Then submit patch to 
> Daniel and Max.

On a side note, I would have thought that the logical place for RPF unicast
checking would be as part of antispoof, would it really require additional
keywords ?


Greg