From owner-cvs-sys Wed Apr 22 16:25:08 1998 Return-Path: Received: (from daemon@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA00611 for cvs-sys-outgoing; Wed, 22 Apr 1998 16:25:08 -0700 (PDT) (envelope-from owner-cvs-sys) Received: from firewall.reed.wattle.id.au (darren2.lnk.telstra.net [139.130.53.33]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA00536; Wed, 22 Apr 1998 23:24:41 GMT (envelope-from darrenr@reed.wattle.id.au) From: darrenr@reed.wattle.id.au Received: (from root@localhost) by firewall.reed.wattle.id.au (8.8.7/8.8.7) id XAA13410; Wed, 22 Apr 1998 23:25:59 GMT Received: from avalon.reed.wattle.id.au(192.168.1.1) by firewall.reed.wattle.id.au via smap (V1.3) id sma013380; Wed Apr 22 23:25:45 1998 Received: from percival.reed.wattle.id.au. by avalon.reed.wattle.id.au. (4.1/SMI-4.1) id AA01355; Thu, 23 Apr 98 09:27:46 EST Message-Id: <9804222327.AA01355@avalon.reed.wattle.id.au.> Subject: Re: cvs commit: src/sys/netinet ip_fw.c To: eivind@yes.no (Eivind Eklund) Date: Thu, 23 Apr 1998 01:50:05 +1000 (EST) Cc: julian@whistle.com, julian@freebsd.org, cvs-committers@freebsd.org, cvs-all@freebsd.org, cvs-sys@freebsd.org In-Reply-To: <19980422155133.57092@follo.net> from "Eivind Eklund" at Apr 22, 98 03:51:33 pm X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-cvs-sys@freebsd.org X-Loop: FreeBSD.org Precedence: bulk In some email I received from Eivind Eklund, sie wrote: > > On Tue, Apr 21, 1998 at 04:31:13PM -0700, Julian Elischer wrote: > > Eivind Eklund wrote: > > > This still doesn't solve the problems with IPFW (foremost, that > > > extending the structure blow the userland interface). > > > > why? > > if you recompile it with a new structure... > > That's what I'm saying - it blow the userland interface. It means > that anything using IPFW has to track the kernel version exactly. There are numerous programs like this already - ps, netstat, top, etc. I'd say "deal with it". > > I agree on the new interface, but the limit on the structure size > > was that each file rule had to fit into an mbuf. see NetBSD's pfil(9) for a starting point.