From owner-freebsd-ipfw@FreeBSD.ORG Tue Mar 16 22:22:27 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AF50B1065677 for ; Tue, 16 Mar 2010 22:22:27 +0000 (UTC) (envelope-from nino80@gmail.com) Received: from mail-fx0-f215.google.com (mail-fx0-f215.google.com [209.85.220.215]) by mx1.freebsd.org (Postfix) with ESMTP id 449038FC15 for ; Tue, 16 Mar 2010 22:22:27 +0000 (UTC) Received: by fxm7 with SMTP id 7so487254fxm.3 for ; Tue, 16 Mar 2010 15:22:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:content-type; bh=Zrqh+bpUiHtzsszv1OMYSIEEIUTKbJBGSp8Uk9nx9G4=; b=g8JWTlgzmi6i8yYeiBSNZN7ntnC+YDjLkfy2kx7og0w96Yujt3H3Ry1t576Qce/Nzi J3pI7h01CkLti25UzUOE9D1HwPeui4ifpT95+r5nEavZtlqiH3F05fKKl9U/9no3EtlG 9LfFY4nQ0FLs7GZvW9aIdIKKlfCDmF8+cn/aY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; b=jJ/rBmwXJDiBRV7Odr9Scm3oYyLI+KKKtegIlUSS63GVMkj2/LuadVHmL2QBMlvwqc uD5ywqaJUuH7adklkfe/fZgKIZIrGBp0XbzUBahKWg6jxNJieG00I4Kr8xaQ1tBPil9T +JfAAhJlb1zCciSmVzJpdC7aU04jSeWwXlKRA= MIME-Version: 1.0 Received: by 10.103.80.24 with SMTP id h24mr6680958mul.113.1268778146284; Tue, 16 Mar 2010 15:22:26 -0700 (PDT) In-Reply-To: <4B992EE8.30309@elischer.org> References: <92bcbda51003100912k25facb5cxc9047105c91a4022@mail.gmail.com> <4B97E412.1050506@elischer.org> <4B981FE5.5090905@smartt.com> <4B9828B2.2010903@elischer.org> <92bcbda51003110047s717bed1bq8bb3eb787eab47f7@mail.gmail.com> <4B992EE8.30309@elischer.org> From: n j Date: Tue, 16 Mar 2010 23:22:06 +0100 Message-ID: <92bcbda51003161522j2b8081a6x9978b27416c8665c@mail.gmail.com> To: freebsd-ipfw@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: IPFIREWALL_FORWARD X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 22:22:27 -0000 > it's needed for the functionality. > you need to slightly change the behaviour or the existing stack in quite a > number of places to handle a forwarded packet. Sorry for catching up with the thread so late, I was without Internet connection for the last couple of days. Thanks for all the replies so far, I've got just one more question: is it correct that pf (as loadable module) has this forward (aka route-to) functionality without needing the kernel recompile? If so, it might be that final push for me to switch from ipfw to pf. Regards, -- Nino