From owner-freebsd-net@FreeBSD.ORG  Fri Dec  3 14:47:26 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0E44716A4CE
	for <freebsd-net@freebsd.org>; Fri,  3 Dec 2004 14:47:26 +0000 (GMT)
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.184])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9C40743D45
	for <freebsd-net@freebsd.org>; Fri,  3 Dec 2004 14:47:25 +0000 (GMT)
	(envelope-from max@love2party.net)
Received: from [212.227.126.207] (helo=mrelayng.kundenserver.de)
	by moutng.kundenserver.de with esmtp (Exim 3.35 #1)
	id 1CaEiS-00084b-00; Fri, 03 Dec 2004 15:47:24 +0100
Received: from [217.83.2.51] (helo=donor.laier.local)
	by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128)
	(Exim 3.35 #1)
	id 1CaEiS-0006HE-00; Fri, 03 Dec 2004 15:47:24 +0100
From: Max Laier <max@love2party.net>
To: freebsd-net@freebsd.org
Date: Fri, 3 Dec 2004 15:48:00 +0100
User-Agent: KMail/1.7.1
References: <00ea01c4d89f$273c9d20$2603fb93@KLOBOUCEK>
In-Reply-To: <00ea01c4d89f$273c9d20$2603fb93@KLOBOUCEK>
MIME-Version: 1.0
Content-Type: multipart/signed;
  boundary="nextPart6298269.uz0DLbLyzS";
  protocol="application/pgp-signature";
  micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200412031548.02444.max@love2party.net>
X-Provags-ID: kundenserver.de abuse@kundenserver.de
	auth:61c499deaeeba3ba5be80f48ecc83056
cc: Petr Holub <hopet@ics.muni.cz>
Subject: Re: pf and bridging
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Dec 2004 14:47:26 -0000

--nextPart6298269.uz0DLbLyzS
Content-Type: text/plain;
  charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Thursday 02 December 2004 19:45, Petr Holub wrote:
> Hi all,
>
> I wonder if it is possible to use the new pf firewall together with
> bridging as it is possible to use it with ipf and ipfw.

Unfortunately the PFIL_HOOKS in bridge.c don't work too well for pf (or ipf=
=20
for the same reason) thus you cannot use stateful filtering. There is an=20
ongoing discussion on freebsd-pf@ that talks about the details:
http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000621.html
http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000625.html
http://lists.freebsd.org/pipermail/freebsd-pf/2004-December/000631.html

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart6298269.uz0DLbLyzS
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQBBsHyiXyyEoT62BG0RAqVaAJ4xEdKCqI8KLH+HYK6i49gSTbM/2QCdEUd0
ClWw1Fc3rt4M3oEl/144xpE=
=2XIf
-----END PGP SIGNATURE-----

--nextPart6298269.uz0DLbLyzS--