From owner-freebsd-net@FreeBSD.ORG Fri Jun 24 12:23:03 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4026116A41C for ; Fri, 24 Jun 2005 12:23:03 +0000 (GMT) (envelope-from fming@borderware.com) Received: from mail.borderware.com (mail.borderware.com [207.236.65.231]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1DB4A43D48 for ; Fri, 24 Jun 2005 12:23:03 +0000 (GMT) (envelope-from fming@borderware.com) Message-ID: <42BBFB25.2080701@borderware.com> Date: Fri, 24 Jun 2005 08:23:01 -0400 From: ming fu User-Agent: Mozilla Thunderbird 0.8 (X11/20040926) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-net@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: ipfilter and ipfw order. X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2005 12:23:03 -0000 Hi, In the 4.x kernel, ipfilter was hardcoded before ipfw in the ip_input(). However, in the 5.x kernel, they register themselve to the pfil hook. As there isn't a priority number during the hook up, looks like who ever register first get to filter the packet first. In case I want to preserve the 4.x behaviour of ipf before ipfw in the input path, how do I reliable achieve that. Regards, Ming