Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Feb 2011 19:53:30 +0300
From:      Sergey Matveychuk <sem@FreeBSD.org>
To:        Rozhuk.IM@gmail.com
Cc:        freebsd-net@freebsd.org
Subject:   Re: divert rewrite
Message-ID:  <4D51750A.3070303@FreeBSD.org>
In-Reply-To: <4d516a6a.8937e30a.0996.2f26@mx.google.com>
References:  <4D4DCD1E.1050906@freebsd.org>	<AANLkTimtDegcGjzXatEOHjQR9GM_hD29ZiKnkT-zG1_S@mail.gmail.com>	<4D4DFC95.9010804@freebsd.org>	<4D501198.6090901@FreeBSD.org> <4d516a6a.8937e30a.0996.2f26@mx.google.com>

next in thread | previous in thread | raw e-mail | index | archive | help
08.02.2011 19:08, rozhuk.im@gmail.com wrote:
> Did you try ng_ether + ng_ksocket?
> It can translate Ethernet frames incapsulated to udp to user space receiver.

The idea is catch packets from firewall (ng_ipfw, ng_nat was mentioned 
by mistake) and pass them to user space module that do some processing 
and puts back the packets into firewall (for rules with `diverted' keyword).

It works now for IPv4 with `divert' and doesn't with IPv6.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4D51750A.3070303>