From owner-freebsd-questions@FreeBSD.ORG  Wed Dec 28 14:38:51 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C531716A41F
	for <freebsd-questions@freebsd.org>;
	Wed, 28 Dec 2005 14:38:51 +0000 (GMT)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: from mail7.sea5.speakeasy.net (mail7.sea5.speakeasy.net
	[69.17.117.9]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B4DB43D7D
	for <freebsd-questions@freebsd.org>;
	Wed, 28 Dec 2005 14:38:47 +0000 (GMT)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: (qmail 26245 invoked from network); 28 Dec 2005 14:38:46 -0000
Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org)
	([66.92.78.145])
	(envelope-sender <freebsd-questions-local@be-well.ilk.org>)
	by mail7.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
	for <freebsd-questions@freebsd.org>; 28 Dec 2005 14:38:46 -0000
Received: by be-well.ilk.org (Postfix, from userid 1147)
	id 7C1D028423; Wed, 28 Dec 2005 09:38:45 -0500 (EST)
Sender: lowell@be-well.ilk.org
To: Aaron Peterson <lloyd.peterson@gmail.com>
References: <95550eab0512270731v31303cfbw9889f0e311872a5c@mail.gmail.com>
	<44acelnxnh.fsf@be-well.ilk.org>
	<95550eab0512280613gf48a1fawd054b1b0b2594346@mail.gmail.com>
From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
Date: 28 Dec 2005 09:38:45 -0500
In-Reply-To: <95550eab0512280613gf48a1fawd054b1b0b2594346@mail.gmail.com>
Message-ID: <44wthpmglm.fsf@be-well.ilk.org>
Lines: 26
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
Subject: Re: pf, pfil hooks and if_bridge
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Dec 2005 14:38:51 -0000

Aaron Peterson <lloyd.peterson@gmail.com> writes:

> On 28 Dec 2005 08:45:06 -0500, Lowell Gilbert
> <freebsd-questions-local@be-well.ilk.org> wrote:
> > Aaron Peterson <lloyd.peterson@gmail.com> writes:
> >
> > > I was reading about the new if_bridge driver, and the ability of any
> > > packet filter to interface with it that uses pfil hooks.  But I can't
> > > seem to find any documentation that says whether pf is such a packet
> > > filter?  Would someone enlighten me if pf is useable with the new
> > > if_bridge driver?
> >
> >
> >  $ grep 'pfil\.h' /usr/scratch/ncvs/src/sys/contrib/pf/*/*
> >  /usr/scratch/ncvs/src/sys/contrib/pf/net/pf_ioctl.c,v:#include <net/pfil.h>
> >  $
> >
> > So, the answer is "yes."
> 
> Thanks, I think it's likely I would not have figured that out on my own :-)

That was the condensed version.  ;-)

I was also checking on the configuration, but it looks like the
if_bridge(4) manual page is all you need.  I didn't *try* it, 
however, so I can't guarantee I caught all of the important points.