From owner-freebsd-pf@FreeBSD.ORG  Mon Apr  9 01:28:27 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 2192A16A400
	for <freebsd-pf@freebsd.org>; Mon,  9 Apr 2007 01:28:27 +0000 (UTC)
	(envelope-from max@love2party.net)
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.188])
	by mx1.freebsd.org (Postfix) with ESMTP id AB9F913C44C
	for <freebsd-pf@freebsd.org>; Mon,  9 Apr 2007 01:28:26 +0000 (UTC)
	(envelope-from max@love2party.net)
Received: from [88.64.185.1] (helo=amd64.laiers.local)
	by mrelayeu.kundenserver.de (node=mrelayeu7) with ESMTP (Nemesis),
	id 0ML2xA-1HaigB3NLq-0007YK; Mon, 09 Apr 2007 03:28:23 +0200
From: Max Laier <max@love2party.net>
Organization: FreeBSD
To: freebsd-pf@freebsd.org,
 KES <kes-kes@yandex.ru>
Date: Mon, 9 Apr 2007 03:28:17 +0200
User-Agent: KMail/1.9.5
References: <15810312978.20070409001552@yandex.ru>
In-Reply-To: <15810312978.20070409001552@yandex.ru>
X-Face: ,,8R(x[kmU]tKN@>gtH1yQE4aslGd<hB5S>u+2];
	R]*pL,U>^H?)gW@49@wdJ`H<=?utf-8?q?=25=7D*=5FBD=0A=09U=5For=3D=5CmOZf764=26nYj=3DJYbR1PW0ud?=>|!~,,CPC.1-D$FG@0h3#'5"k{V]a~.<=?utf-8?q?mZ=7D44=23Se=7Em=0A=09Fe=7E=5C=5DX5B=5D=5Fxj?=(ykz9QKMw_l0C2AQ]}Ym8)fU
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart1331892.aWnR98lHvb";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200704090328.22746.max@love2party.net>
X-Provags-ID: V01U2FsdGVkX1/8wKC/meBci/7UKVUPLyTuwqPVR8S42jb5Vly
	y1DIE62Y3oPvtvkrVXeEc0tDGquQDXY8EEvVJ2deHXw+Vvjs50
	FSuuH6fj6kWHbNDwZW0uw==
Cc: 
Subject: Re: ipfw pf
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Apr 2007 01:28:27 -0000

--nextPart1331892.aWnR98lHvb
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Sunday 08 April 2007 23:15, KES wrote:
> What coming first: ipfw or pf?
> -->rl0-->ipfw-->pf-->kernel-->pf--->ipfw
> or
> -->rl0-->pf-->ipfw-->kernel-->ipfw--->pf
> ?

Unfortunately you can't tell right now.  It depends on when/how you enable=
=20
the components.  I did have some patches to allow for pfil reordering,=20
but they were interchanged with locking changes that were not such a good=20
idea.  I intend to provide a mechanism to set the order via sysctl once=20
we have a final plan for pfil locking.  Sorry.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1331892.aWnR98lHvb
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQBGGZa2XyyEoT62BG0RAiOmAJsGsIn5vEJL5TxKdbp/UzTYt4UGugCeK0AO
O7auX091nmn9x/J8Hk+wcm4=
=E/0C
-----END PGP SIGNATURE-----

--nextPart1331892.aWnR98lHvb--