From owner-freebsd-questions@FreeBSD.ORG Wed Dec 28 14:13:56 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E92E16A41F for ; Wed, 28 Dec 2005 14:13:56 +0000 (GMT) (envelope-from lloyd.peterson@gmail.com) Received: from xproxy.gmail.com (xproxy.gmail.com [66.249.82.207]) by mx1.FreeBSD.org (Postfix) with ESMTP id CC57B43D55 for ; Wed, 28 Dec 2005 14:13:54 +0000 (GMT) (envelope-from lloyd.peterson@gmail.com) Received: by xproxy.gmail.com with SMTP id s9so991898wxc for ; Wed, 28 Dec 2005 06:13:54 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=lyxwETptsPYtz6x/tcyVCPKSF9/ZcOkK8T3yt5HKeesbiGUPM3vqd9QlHtCSXPUvI+89nPR9rN+BIr6T1Rwy4gJTvXckS3BiKw1W/b64TUWpkCUZW2EnLhxV+4WepM40oE+/PKnijel5Skhp2oH43F+PIg6U5x6d7O+kp5olLOU= Received: by 10.70.89.3 with SMTP id m3mr8078852wxb; Wed, 28 Dec 2005 06:13:54 -0800 (PST) Received: by 10.70.62.15 with HTTP; Wed, 28 Dec 2005 06:13:54 -0800 (PST) Message-ID: <95550eab0512280613gf48a1fawd054b1b0b2594346@mail.gmail.com> Date: Wed, 28 Dec 2005 09:13:54 -0500 From: Aaron Peterson To: FreeBSD Questions In-Reply-To: <44acelnxnh.fsf@be-well.ilk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <95550eab0512270731v31303cfbw9889f0e311872a5c@mail.gmail.com> <44acelnxnh.fsf@be-well.ilk.org> Subject: Re: pf, pfil hooks and if_bridge X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Dec 2005 14:13:56 -0000 On 28 Dec 2005 08:45:06 -0500, Lowell Gilbert wrote: > Aaron Peterson writes: > > > I was reading about the new if_bridge driver, and the ability of any > > packet filter to interface with it that uses pfil hooks. But I can't > > seem to find any documentation that says whether pf is such a packet > > filter? Would someone enlighten me if pf is useable with the new > > if_bridge driver? > > > $ grep 'pfil\.h' /usr/scratch/ncvs/src/sys/contrib/pf/*/* > /usr/scratch/ncvs/src/sys/contrib/pf/net/pf_ioctl.c,v:#include > $ > > So, the answer is "yes." Thanks, I think it's likely I would not have figured that out on my own :-) Aaron