From owner-cvs-all  Wed Apr 22 16:24:52 1998
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA00549
          for cvs-all-outgoing; Wed, 22 Apr 1998 16:24:52 -0700 (PDT)
          (envelope-from owner-cvs-all@FreeBSD.ORG)
Received: from firewall.reed.wattle.id.au (darren2.lnk.telstra.net [139.130.53.33])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA00536;
          Wed, 22 Apr 1998 23:24:41 GMT
          (envelope-from darrenr@reed.wattle.id.au)
From: darrenr@reed.wattle.id.au
Received: (from root@localhost)
	by firewall.reed.wattle.id.au (8.8.7/8.8.7) id XAA13410;
	Wed, 22 Apr 1998 23:25:59 GMT
Received: from avalon.reed.wattle.id.au(192.168.1.1) by firewall.reed.wattle.id.au via smap (V1.3)
	id sma013380; Wed Apr 22 23:25:45 1998
Received: from percival.reed.wattle.id.au. by avalon.reed.wattle.id.au. (4.1/SMI-4.1)
	id AA01355; Thu, 23 Apr 98 09:27:46 EST
Message-Id: <9804222327.AA01355@avalon.reed.wattle.id.au.>
Subject: Re: cvs commit: src/sys/netinet ip_fw.c
To: eivind@yes.no (Eivind Eklund)
Date: Thu, 23 Apr 1998 01:50:05 +1000 (EST)
Cc: julian@whistle.com, julian@FreeBSD.ORG, cvs-committers@FreeBSD.ORG,
        cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
In-Reply-To: <19980422155133.57092@follo.net> from "Eivind Eklund" at Apr 22, 98 03:51:33 pm
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

In some email I received from Eivind Eklund, sie wrote:
> 
> On Tue, Apr 21, 1998 at 04:31:13PM -0700, Julian Elischer wrote:
> > Eivind Eklund wrote:
> > > This still doesn't solve the problems with IPFW (foremost, that
> > > extending the structure blow the userland interface).
> > 
> > why?
> > if you recompile it with a new structure...
> 
> That's what I'm saying - it blow the userland interface.  It means
> that anything using IPFW has to track the kernel version exactly.

There are numerous programs like this already - ps, netstat, top, etc.

I'd say "deal with it".

> > I agree on the new interface, but the limit on the structure size
> > was that each file rule had to fit into an mbuf.

see NetBSD's pfil(9) for a starting point.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message