Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Feb 2011 00:08:04 +0800
From:      rozhuk.im@gmail.com
To:        <freebsd-net@freebsd.org>
Subject:   RE: divert rewrite
Message-ID:  <4d516a6a.8937e30a.0996.2f26@mx.google.com>
In-Reply-To: <4D501198.6090901@FreeBSD.org>
References:  <4D4DCD1E.1050906@freebsd.org>	<AANLkTimtDegcGjzXatEOHjQR9GM_hD29ZiKnkT-zG1_S@mail.gmail.com>	<4D4DFC95.9010804@freebsd.org> <4D501198.6090901@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message-----
> From: owner-freebsd-net@freebsd.org [mailto:owner-freebsd-
> net@freebsd.org] On Behalf Of Sergey Matveychuk
> Sent: Monday, February 07, 2011 11:37 PM
> To: Julian Elischer
> Cc: Ivo Vachkov; FreeBSD Net
> Subject: Re: divert rewrite
> 
> 06.02.2011 4:42, Julian Elischer wrote:
> > On 2/5/11 4:09 PM, Ivo Vachkov wrote:
> >> Hello,
> >>
> >> How can I help?
> >
> > if you have ipv6 connectivity and experience, I have no experience or
> > connectivity, with it so
> > I'll be coding blind and will need a tester.
> > If you have an application for IPV6 testing that would be even
> better.
> > Divert is often used for NAT but that doesn't seem very useful for
> IPv6 and
> > natd doesn't support it anyhow.
> 
> Object :)
> Divert is really useful way to get packets from firewall to userspace,
> analyse or process them some way and put them back. Really I see no
> other way for this for IPv6. I've tried ng_socket+ng_nat but there is
> no
> easy way to put a packet back in firewall.
> 
> I'm very interested in the process. And I'm ready to help in testing.

Did you try ng_ether + ng_ksocket?
It can translate Ethernet frames incapsulated to udp to user space receiver.








Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4d516a6a.8937e30a.0996.2f26>