Date: Sat, 11 Dec 2021 08:38:04 +0300 From: =?UTF-8?B?w5Z6a2FuIEtJUklL?= <ozkan.kirik@gmail.com> To: Lars Engels <lme@freebsd.org> Cc: FreeBSD Hackers <freebsd-hackers@freebsd.org> Subject: Re: Call for Foundation-supported Project Ideas Message-ID: <CAAcX-AFVWpX_M=pxrT7m7OA_taBTxmmsDhqHRHDOxfbDc=3=gA@mail.gmail.com> In-Reply-To: <50ce89e135767d11adc2f90a602b28ce@FreeBSD.org> References: <861r36xzpe.fsf@phe.ftfl.ca> <861r2l914z.fsf@phe.ftfl.ca> <CAAcX-AHGEJCS8aWD0N8he=y0QFbThKaqgFy2ZvfCXaHNA-Uz5Q@mail.gmail.com> <50ce89e135767d11adc2f90a602b28ce@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
freebsd-pf: matching and logging receive interface and xmit interface
in single rule (ipfw has support)
I'm looking for a solution to match a traffic received on igb0 and xmit on =
igb1.
According to man page, ipfw(8) supports this syntax:
ipfw add deny ip from any to any out recv ed0 xmit ed1
The recv interface can be tested on either incoming or outgoing
packets, while the xmit interface can only be tested on outgoing
packets. So out is required (and in is invalid) whenever xmit is
used.
Is it possible to add support to pf for this feature like ipfw?
Have a nice day
On Fri, Dec 10, 2021 at 1:16 PM Lars Engels <lme@freebsd.org> wrote:
>
> Am 2021-12-09 19:25, schrieb =C3=96zkan KIRIK:
> > bsnmpd: monitoring jails (event with different vnet) resources like
> > interfaces, cpu usage etc.
> >
> > I don't have an account to modify wiki. thanks
>
>
> I added this to the wiki page.
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAAcX-AFVWpX_M=pxrT7m7OA_taBTxmmsDhqHRHDOxfbDc=3=gA>