Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Mar 1999 11:40:42 -0800 (PST)
From:      Archie Cobbs <archie@whistle.com>
To:        julian@whistle.com (Julian Elischer)
Cc:        romanp@wuppy.rcs.ru, current@FreeBSD.ORG
Subject:   Re: Status of 'tee' firewall action
Message-ID:  <199903291940.LAA28510@bubba.whistle.com>
In-Reply-To: <Pine.BSF.3.95.990329091217.13619B-100000@current1.whistle.com> from Julian Elischer at "Mar 29, 99 09:14:05 am"

next in thread | previous in thread | raw e-mail | index | archive | help
Julian Elischer writes:
> Unfortunatly the 'tee' option is quite a bit more complicated than it
> looks.this is because teh normal way that packets get to divert sockets
> and the way it'd have to get there from a 'tee' are kinda incompatible.
> 
> It can be done but it's just not quite as straight forward as it first
> appears..
> 
> On Mon, 29 Mar 1999, Roman V. Palagin wrote:
> > 
> > What the status of 'tee' action? Anybody working on it?

As a workaround, use "divert" instead of "tee" and immediately
write any packet you read, using the same struct sockaddr, back
to the socket.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199903291940.LAA28510>