From owner-freebsd-hackers Sun Jun 20 7:48:59 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from labinfo.iet.unipi.it (labinfo.iet.unipi.it [131.114.9.5]) by hub.freebsd.org (Postfix) with SMTP id 8901014BEC for ; Sun, 20 Jun 1999 07:48:54 -0700 (PDT) (envelope-from luigi@labinfo.iet.unipi.it) Received: from localhost (luigi@localhost) by labinfo.iet.unipi.it (8.6.5/8.6.5) id OAA20066; Sun, 20 Jun 1999 14:21:56 +0200 From: Luigi Rizzo Message-Id: <199906201221.OAA20066@labinfo.iet.unipi.it> Subject: Re: ipfilter (was: RE: Introduction) To: stan@osgroup.com Date: Sun, 20 Jun 1999 14:21:55 +0200 (MET DST) Cc: hackers@FreeBSD.ORG In-Reply-To: <01BEBA3E.6F913AC0.stan@osgroup.com> from "Constantine Shkolny" at Jun 19, 99 10:27:53 am X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 1317 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > This means that IP filters need to grab some of IP packets, process > them on a specialized prosessor and then re-inject them into the IP > packet stream. That is, the filter may decide to convert the packet, > but it doesn't have it ready-to-go when it has to return. However, > it may have it ready at some later time, possibly when it processes > a hardware interrupt and sees that the co-processor has finished its > work on the packet. Can ipfilter handle this? no idea about ipfilter, but i guess not -- in the case of ipfw i did have to implement exactly this funcionality for dummynet and i ended up putting it _outside_ dummynet (i.e. in the callers routines, ip_input(), ip_output() and bdg_forward() ) . this might ease life to those who want to replace ipfw with ipfilter for dummynet or similar things, if nothing else. cheers luigi -----------------------------------+------------------------------------- Luigi RIZZO, luigi@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL/FAX: +39-050-568.533/522 . via Diotisalvi 2, 56126 PISA (Italy) http://www.iet.unipi.it/~luigi/ngc99/ ==== First International Workshop on Networked Group Communication ==== -----------------------------------+------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message