From owner-freebsd-net  Sat Feb 24  6: 9:53 2001
Delivered-To: freebsd-net@freebsd.org
Received: from hera.drwilco.net (isis.drwilco.net [194.109.63.159])
	by hub.freebsd.org (Postfix) with ESMTP id 284DB37B65D
	for <net@FreeBSD.ORG>; Sat, 24 Feb 2001 06:09:49 -0800 (PST)
	(envelope-from drwilco@drwilco.nl)
Received: from ceres.drwilco.nl (ceres.drwilco.net [10.1.1.19])
	by hera.drwilco.net (8.11.2/8.11.1) with ESMTP id f1ODwCo66656;
	Sat, 24 Feb 2001 14:58:13 +0100 (CET)
	(envelope-from drwilco@drwilco.nl)
Message-Id: <4.3.2.7.0.20010224143232.00bff2d0@mail.bsdchicks.com>
X-Sender: lists@mail.bsdchicks.com
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Sat, 24 Feb 2001 14:34:42 +0100
To: Julian Elischer <julian@elischer.org>,
	Satyajeet Seth <sseth@sasken.com>
From: "Rogier R. Mulhuijzen" <drwilco@drwilco.nl>
Subject: Re: Using netgraph to implement pseudo interfaces
Cc: net@FreeBSD.ORG
In-Reply-To: <3A910856.CE68FEAC@elischer.org>
References: <Pine.GSO.4.30.0102171456150.21367-100000@suns3.sasi.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


> > I plan to design  a netgraph as follows:
> >
> >          iface1
> >            /
> > fxp0 <-> bpf
> >            \
> >          iface2
>
>I forgot to add in my previous response that you'd have to do this like:
>
>fxp0: <--> bpf <--> bpf <--> interface0
>             \        \
>              \        ------>interface1
>               \
>                \------------>interface2
>
>as each bpfnode hook only selects between a
>"match" and "no match" hook.
>
>you could do it with one node as follows:
>
>
>             +----------------------------+
>             |                            |
>             +->(hook2)[   ]              |
>fxp0:(lower)<->(hook1)[bpf](nomatch1)----+
>                       [   ](match1)<-------->(upper)fxp0:
>                       [   ](nomatch2)<------>(hook)iface1:
>                       [   ](match2)<-------->(hook)iface2:
>
>i.e. loop the data back through the same node twice to effect two rules on
>the same data.

Or you could use the ALL mode in the one2many node. That way all incoming 
traffic would reach all interfaces. Interfaces should still only accept 
packets meant for themselves.

Or you the bridge node.

         DocWilco


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message