Date: Sat, 30 Jun 2001 00:18:37 -0600 From: Wes Peters <wes@softweyr.com> To: Clark Gaylord <cgaylord@vt.edu> Cc: freebsd-net@freebsd.org Subject: Re: fastforwarding? Message-ID: <3B3D6F3D.25B376E3@softweyr.com> References: <GPEOJKGHAMKFIOMAGMDICEOJDGAA.deepak@ai.net> <20010626093545.D49992@sunbay.com> <3B3AB4F8.184A2EFE@softweyr.com> <20010629075815.N55750@e028121.vtacs.vt.edu> <20010629111830.F78038@sneakerz.org> <20010629221121.A6512@e028121.vtacs.vt.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Clark Gaylord wrote:
>
> On Fri, Jun 29, 2001 at 11:18:31AM -0500, Alfred Perlstein wrote:
> > * Clark Gaylord <cgaylord@vt.edu> [010629 06:59] wrote:
> > > I notice the man page points out that this prevents the use of
> > > ipfilter, etc. The first packet(s?) do get forwarded by the usual
> > > process (yes?), so does this imply that at least a "deny X" would
> > > still work (as the first packet would get denied and hence the
> > > cache does not get populated)? What are the limitations to ipfw
> > > and friends working right in conjunction with fastforwarding?
> >
> > I really doubt that your assumptions are true.
>
> That's why I pose it as a question...
No, it's a good question. I'd want to try it first; it would depend on
whether it's dropped by an ingress filter or an egress filter. I'm not
that familiar with ipfw, but I guess I should be.
Is there a command on FreeBSD to dump the contents of the fastforwarding
route cache? If not, this would be a good "junior kernel hacker" task
as well.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters Softweyr LLC
wes@softweyr.com http://softweyr.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B3D6F3D.25B376E3>