From owner-freebsd-current Wed Aug 21 10:43:55 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED58A37B400 for ; Wed, 21 Aug 2002 10:43:52 -0700 (PDT) Received: from leviathan.inethouston.net (leviathan.inethouston.net [66.64.12.249]) by mx1.FreeBSD.org (Postfix) with ESMTP id 809B243E6A for ; Wed, 21 Aug 2002 10:43:52 -0700 (PDT) (envelope-from dwcjr@inethouston.net) Received: by leviathan.inethouston.net (Postfix, from userid 1001) id C9B603198C9; Wed, 21 Aug 2002 12:43:54 -0500 (CDT) Date: Wed, 21 Aug 2002 12:43:54 -0500 From: "David W. Chapman Jr." To: Sergey Mokryshev Cc: "David W. Chapman Jr." , cjclark@alum.mit.edu, current@FreeBSD.ORG Subject: Re: question about ipl.ko Message-ID: <20020821174354.GA42880@leviathan.inethouston.net> Reply-To: "David W. Chapman Jr." Mail-Followup-To: Sergey Mokryshev , "David W. Chapman Jr." , cjclark@alum.mit.edu, current@FreeBSD.ORG References: <20020816130147.GA39907@studnet.sk> <20020816193854.GC47465@blossom.cjclark.org> <062201c2475f$9f19ab40$0f0010ac@office.tersys.ru> <20020820181519.GA69240@blossom.cjclark.org> <0ab501c2492d$bc90fe10$0f0010ac@office.tersys.ru> <20020821162631.GA38043@leviathan.inethouston.net> <0b6601c24934$9dcf97f0$0f0010ac@office.tersys.ru> <20020821170743.GC38043@leviathan.inethouston.net> <0b8901c24939$717d0f20$0f0010ac@office.tersys.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0b8901c24939$717d0f20$0f0010ac@office.tersys.ru> X-Operating-System: FreeBSD 4.6-STABLE i386 User-Agent: Mutt/1.5.1i Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > There are a few files with PFIL_HOOKS-dependant #ifdefs, but it is > strongly > tied with the code. > > /sys/net/bridge.c > /sys/netinet/ip_input.c > /sys/netinet/ip_output.c > /sys/netinet6/ip6_forward.c > /sys/netinet6/ip6_input.c > /sys/netinet6/ip6_output.c > > Darren Reed has some pieces of code on his site, but I > did not read it. > ftp://coombs.anu.edu.au/pub/net/ip-filter/pfil-1.26.tar.gz > > According to pfil(9) manual > ----------- > BUGS > The current pfil implementation will need changes to suit a > threaded ker- > nel model. > ----------- > > May be this is the reason not to make it default. I'm sure there is probably some reason, but if we can make it a kld, there shouldn't be a reason we can't make ipl.ko depend on it. I do not do much coding so I don't know if its even possible to do it as a kld -- David W. Chapman Jr. dwcjr@inethouston.net Raintree Network Services, Inc. dwcjr@freebsd.org FreeBSD Committer To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message