Date: Sun, 17 Mar 2002 16:55:24 -0800 (PST) From: "Crist J. Clark" <cjc@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/net bridge.c Message-ID: <200203180055.g2I0tOi86291@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
cjc 2002/03/17 16:55:24 PST
Modified files:
sys/net bridge.c
Log:
Add hooks for very basic IPFilter support in bridging. Set,
# sysctl net.link.ether.bdg_ipf=1
To enable. Just like ipfw(8) bridging, only input packets are filtered
in the bridge. Filtering works just like in the IP layer, ipf(8)
first, then ipfw(8). And just like in the IP layer, both are
independent, one need not be run to use the other. (Note: This will
not work in, but doesn't break, the bridge.ko module. The ipl.ko
module would need to be fixed before that is worth worrying about.)
Reviewed by: luigi
Revision Changes Path
1.48 +42 -5 src/sys/net/bridge.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200203180055.g2I0tOi86291>