Date: Mon, 01 Oct 2001 11:33:21 -0600 From: Brett Glass <brett@lariat.org> To: Laurent Fabre <fabre@matranet.com>, freebsd-security@FreeBSD.ORG Subject: Re: LaBrea for BSD Message-ID: <4.3.2.7.2.20011001113137.046d1600@localhost> In-Reply-To: <200110010917.LAA03131@malraux.matranet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 03:21 AM 10/1/2001, Laurent Fabre wrote: >Ok what about two modes, one will acquire spare IP on the network, and the other won't. Instead rules will be loaded from a config file (and yep of course we need hooks, maybe the DHCPd log output could be sufficient but i didn't look at it yet). This would be virtually the same as using divert(4) sockets or BPF. The nice thing about divert(4) sockets is that IPFW can pre-filter packets so that they only receive relevant traffic. You can eliminate a lot of redundant effort. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20011001113137.046d1600>