Date: Tue, 08 Feb 2011 09:03:49 -0800 From: Julian Elischer <julian@freebsd.org> To: Sergey Matveychuk <sem@freebsd.org> Cc: freebsd-net@freebsd.org, Rozhuk.IM@gmail.com Subject: Re: divert rewrite Message-ID: <4D517775.6090107@freebsd.org> In-Reply-To: <4D51750A.3070303@FreeBSD.org> References: <4D4DCD1E.1050906@freebsd.org> <AANLkTimtDegcGjzXatEOHjQR9GM_hD29ZiKnkT-zG1_S@mail.gmail.com> <4D4DFC95.9010804@freebsd.org> <4D501198.6090901@FreeBSD.org> <4d516a6a.8937e30a.0996.2f26@mx.google.com> <4D51750A.3070303@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> 08.02.2011 19:08, rozhuk.im@gmail.com wrote: >> Did you try ng_ether + ng_ksocket? >> It can translate Ethernet frames incapsulated to udp to user space >> receiver. > > The idea is catch packets from firewall (ng_ipfw, ng_nat was > mentioned by mistake) and pass them to user space module that do > some processing and puts back the packets into firewall (for rules > with `diverted' keyword). yes, however did you try the ipfw netgraph keyword and the ng_ipfw node? I have also been wondering it it might not make sense to simpply replavce the diver code with a netgraph equivalent.. Using the ng_ipfw node one can almost do it with no changes as it is. > > It works now for IPv4 with `divert' and doesn't with IPv6. yes, I'm pondering the right fix for that.. > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4D517775.6090107>