Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Apr 2007 20:20:43 +0200
From:      Max Laier <max@love2party.net>
To:        freebsd-pf@freebsd.org
Subject:   Re: ng_tag and pf?
Message-ID:  <200704172020.50227.max@love2party.net>
In-Reply-To: <55e8a96c0704171025n4a3a8893s912886f6cfd7b36a@mail.gmail.com>
References:  <55e8a96c0704171025n4a3a8893s912886f6cfd7b36a@mail.gmail.com>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On Tuesday 17 April 2007 19:25, Bill Marquette wrote:
> Is it possible to use ng_tag in conjunction with pf?  I have a setup
> in OpenBSD currently where I use the bridge interface to apply a tag
> to a packet based on the mac address so that when pf gets the packet
> it can apply a reply-to rule to it to keep traffic flows symmetric
> (the upstream device(s) also keep state, so the reply path has to be
> the same).  I'm looking to duplicate this in FreeBSD with pf and I
> think ng_tag and maybe ng_bpf can make this happen, but I'm at a bit
> of a loss as to how at this point.  Any pointers or at least a "yes
> it's absolutely possible, figure it out and let us know the exact
> config" answer would be very much appreciated.  Thanks

Not at the moment.  I put out a project idea to integrate pf with netgraph 
some while ago (as I don't have time to code it myself).  There were two 
applications for the Google Summer of Code program to implement this, but 
neither were selected.  However, another student who did apply for SoC as 
well and was (slightly) outranked with his original proposal is now 
pursueing this idea.  He plans to work within similar bounds as the other 
SoC-students.

To sum this up, stay tuned from something to happen.  Ideas, feedback and 
feature requests are certainly welcome.

-- 
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQBGJRACXyyEoT62BG0RAuxHAJwK1O72F4r/MJ9mbdaE8Eai1MKx2QCfYIg5
9PGZSNXs2oWxMCBecdwSb6o=
=x8Vw
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704172020.50227.max>