From owner-cvs-sys  Wed Apr 22 16:25:08 1998
Return-Path: <owner-cvs-sys>
Received: (from daemon@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA00611
          for cvs-sys-outgoing; Wed, 22 Apr 1998 16:25:08 -0700 (PDT)
          (envelope-from owner-cvs-sys)
Received: from firewall.reed.wattle.id.au (darren2.lnk.telstra.net [139.130.53.33])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA00536;
          Wed, 22 Apr 1998 23:24:41 GMT
          (envelope-from darrenr@reed.wattle.id.au)
From: darrenr@reed.wattle.id.au
Received: (from root@localhost)
	by firewall.reed.wattle.id.au (8.8.7/8.8.7) id XAA13410;
	Wed, 22 Apr 1998 23:25:59 GMT
Received: from avalon.reed.wattle.id.au(192.168.1.1) by firewall.reed.wattle.id.au via smap (V1.3)
	id sma013380; Wed Apr 22 23:25:45 1998
Received: from percival.reed.wattle.id.au. by avalon.reed.wattle.id.au. (4.1/SMI-4.1)
	id AA01355; Thu, 23 Apr 98 09:27:46 EST
Message-Id: <9804222327.AA01355@avalon.reed.wattle.id.au.>
Subject: Re: cvs commit: src/sys/netinet ip_fw.c
To: eivind@yes.no (Eivind Eklund)
Date: Thu, 23 Apr 1998 01:50:05 +1000 (EST)
Cc: julian@whistle.com, julian@freebsd.org, cvs-committers@freebsd.org,
        cvs-all@freebsd.org, cvs-sys@freebsd.org
In-Reply-To: <19980422155133.57092@follo.net> from "Eivind Eklund" at Apr 22, 98 03:51:33 pm
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-cvs-sys@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

In some email I received from Eivind Eklund, sie wrote:
> 
> On Tue, Apr 21, 1998 at 04:31:13PM -0700, Julian Elischer wrote:
> > Eivind Eklund wrote:
> > > This still doesn't solve the problems with IPFW (foremost, that
> > > extending the structure blow the userland interface).
> > 
> > why?
> > if you recompile it with a new structure...
> 
> That's what I'm saying - it blow the userland interface.  It means
> that anything using IPFW has to track the kernel version exactly.

There are numerous programs like this already - ps, netstat, top, etc.

I'd say "deal with it".

> > I agree on the new interface, but the limit on the structure size
> > was that each file rule had to fit into an mbuf.

see NetBSD's pfil(9) for a starting point.