Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 May 2000 16:46:44 +1200
From:      Dave Preece <dave.preece@kbgroup.co.nz>
To:        Julian Elischer <julian@elischer.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   RE: Re-inserting packets into firewall.
Message-ID:  <67B808B0DD93D211ABEE0000B498356B2B4E95@internet.kbgroup.co.nz>

next in thread | raw e-mail | index | archive | help
Julian, 

Many thanks!

> If you  reinsert the packet and use the same sockaddr that 
> you received,
> it should insert the packet at the first rule number GREATER THAN the
> rule that diverted it. The rule number of diversion is stored in 
> the 'port' field of the sockaddr.

Loud clang noise as penny drops! I has been looking for this in the received
IP packet, a eureka moment later and I realised what the sockaddr* in
recvfrom is for. 

> man 4 divert from memory..

I should learn to apropos, eh? Too much time with NT, I'm afraid. Still, I
am learning.

> also look at the natd program

Have been, it's been a huge help. 

Thanks again,
Dave :)

>       __--_|\  Julian Elischer
>      /       \ julian@elischer.org
>     (   OZ    ) World tour 2000
> ---> X_.---._/  presently in:  Perth
>             v

Presently in: Wellington NZ.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?67B808B0DD93D211ABEE0000B498356B2B4E95>