From owner-freebsd-ipfw@FreeBSD.ORG Wed Sep 17 12:52:43 2003 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8B1C516A4BF for ; Wed, 17 Sep 2003 12:52:43 -0700 (PDT) Received: from mout1.freenet.de (mout1.freenet.de [194.97.50.132]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B8A643FBF for ; Wed, 17 Sep 2003 12:52:42 -0700 (PDT) (envelope-from ino-qc@spotteswoode.de.eu.org) Received: from [194.97.50.135] (helo=mx2.freenet.de) by mout1.freenet.de with asmtp (Exim 4.22) id 19ziLx-0005Wg-80 for freebsd-ipfw@freebsd.org; Wed, 17 Sep 2003 21:52:41 +0200 Received: from p3e9baadf.dip.t-dialin.net ([62.155.170.223] helo=spotteswoode.dnsalias.org) by mx2.freenet.de with asmtp (ID inode@freenet.de) (Exim 4.23 #2) id 19ziLw-00050x-RZ for freebsd-ipfw@freebsd.org; Wed, 17 Sep 2003 21:52:41 +0200 Received: (qmail 2340 invoked by uid 0); 17 Sep 2003 19:53:02 -0000 Date: 17 Sep 2003 21:52:40 +0200 Message-ID: From: "Clemens Fischer" To: "Clement Laforet" In-Reply-To: <20030917175249.4df78d7d.sheepkiller@cultdeadsheep.org> (Clement Laforet's message of "Wed, 17 Sep 2003 17:52:49 +0200") References: <20030916235808.X92689-100000@skywalker.rogness.net> <20030917175249.4df78d7d.sheepkiller@cultdeadsheep.org> User-Agent: Gnus/5.1003 (Gnus v5.10.3) Emacs/21.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-ipfw@freebsd.org Subject: Re: Divert code X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 19:52:43 -0000 * Clement Laforet: > On Wed, 17 Sep 2003 00:06:43 -0600 (MDT) > Nick Rogness wrote: > >> Without knowing much about the kernel ipfw divert code, what would it >> take to make it skip the ipfw divert rule if the app that's listening >> on that port dies? Besides 'a miracle' or an 'act of god' =) Some >> general ideas or thoughts would be nice. > > you need to write a daemon which removes divert rules, or, simply > use supervise. the supervise from djbs daemontools? how would this help? clemens