From owner-freebsd-stable  Fri Jan 31 14:26: 0 2003
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3C59337B401
	for <stable@freebsd.org>; Fri, 31 Jan 2003 14:25:59 -0800 (PST)
Received: from web14105.mail.yahoo.com (web14105.mail.yahoo.com [216.136.172.135])
	by mx1.FreeBSD.org (Postfix) with SMTP id 68DB643F3F
	for <stable@freebsd.org>; Fri, 31 Jan 2003 14:25:58 -0800 (PST)
	(envelope-from cguttesen@yahoo.dk)
Message-ID: <20030131222558.61732.qmail@web14105.mail.yahoo.com>
Received: from [193.217.137.48] by web14105.mail.yahoo.com via HTTP; Fri, 31 Jan 2003 23:25:58 CET
Date: Fri, 31 Jan 2003 23:25:58 +0100 (CET)
From: =?iso-8859-1?q?Claus=20Guttesen?= <cguttesen@yahoo.dk>
Subject: Re: IPF & IPFW
To: "Crist J. Clark" <cjc@freebsd.org>
Cc: stable@freebsd.org
In-Reply-To: <20030131221606.GC30498@blossom.cjclark.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

Hi.

> Guttesen wrote:
> > You may wish to read
> >
http://home.earthlink.net/~jaymzh666/ipf/IPFfreebsd.html#14.
> > This explains in what order ipf and ipfw is
> loaded.
> > 
> > If you want to let ipfw to process the ip-packet
> > first, you can remove ipfilter from the kernel and
> > load it as a module instead. This should solve
> your
> > problem.
> 
> Nuh-uh. The hooks for ipf(8) and ipfw(8) always are
> in the same place
> in ip_input.c and ip_output.c. The order of loading
> modules has no
> impact.
> 
> To the original poster, there is nothing you can do
> short of hacking
> ip_input.c and ip_output.c to fit your designs. But
> you are perfectly
> free to do it if you'd like. (Ain't open source and
> BSD licenses
> great?)
> -- 

Thank you for the info. I guess it's OK that I forward
this info to the maintainer of the above mentioned
FAQ.

regards
Claus


Har du problemer med din hjemmecomputer? Få hjælp med Yahoo!s PC-support på http://dk.shopping.yahoo.com/pcsupport/index.html

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message