From owner-freebsd-net@FreeBSD.ORG Mon Nov 1 10:05:06 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0576916A4CF for ; Mon, 1 Nov 2004 10:05:06 +0000 (GMT) Received: from poison2.syncrontech.com (adsl-nat.syncrontech.com [213.28.98.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id A91FB43D5D for ; Mon, 1 Nov 2004 10:05:04 +0000 (GMT) (envelope-from ari@suutari.iki.fi) Received: from guinness.syncrontech.com (guinness.syncrontech.com [62.71.8.57])iA1A4u0d030251; Mon, 1 Nov 2004 12:05:00 +0200 (EET) (envelope-from ari@suutari.iki.fi) Received: from coffee (coffee.syncrontech.com [62.71.8.37]) iA1A4tc6031082; Mon, 1 Nov 2004 12:04:55 +0200 (EET) (envelope-from ari@suutari.iki.fi) Message-ID: <02a901c4bffa$3c8a91e0$2508473e@sad.syncrontech.com> From: "Ari Suutari" To: "Joost Bekkers" References: <200410300927.51286.ari@suutari.iki.fi> <20041030214212.GA1737@bps.jodocus.org> <018a01c4bfe6$bea23020$2508473e@sad.syncrontech.com> <20041101093239.GA34571@bps.jodocus.org> Date: Mon, 1 Nov 2004 12:04:49 +0200 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 cc: freebsd-net@freebsd.org Subject: Re: ipfw and ipsec processing order for outgoing packets wrong X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2004 10:05:06 -0000 Hi, > But that gives us 2 blocks of identical code to maintain. To me that > doesn't > seem The Right Way(tm), but I haven't yet thought of a way that is better. My pseudo-code was more trying to point out the needed functionality. I wouldn't say either that just copying and pasting the similar block of code to two places is an optimal solution. Ari S.