From owner-cvs-sys  Tue Apr 21 16:40:50 1998
Return-Path: <owner-cvs-sys>
Received: (from daemon@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA21711
          for cvs-sys-outgoing; Tue, 21 Apr 1998 16:40:50 -0700 (PDT)
          (envelope-from owner-cvs-sys)
Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA21676;
          Tue, 21 Apr 1998 23:40:37 GMT
          (envelope-from julian@whistle.com)
Received: (from daemon@localhost)
	by alpo.whistle.com (8.8.5/8.8.5) id QAA18894;
	Tue, 21 Apr 1998 16:36:41 -0700 (PDT)
Received: from current1.whistle.com(207.76.205.22)
 via SMTP by alpo.whistle.com, id smtpd018886; Tue Apr 21 23:36:33 1998
Message-ID: <353D2C41.1F1A7590@whistle.com>
Date: Tue, 21 Apr 1998 16:31:13 -0700
From: Julian Elischer <julian@whistle.com>
Organization: Whistle Communications
X-Mailer: Mozilla 3.0Gold (X11; I; FreeBSD 2.2.5-RELEASE i386)
MIME-Version: 1.0
To: Eivind Eklund <eivind@yes.no>
CC: Julian Elischer <julian@FreeBSD.ORG>, cvs-committers@FreeBSD.ORG,
        cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
Subject: Re: cvs commit: src/sys/netinet ip_fw.c
References: <199804211854.LAA01853@freefall.freebsd.org> <19980422000150.56907@follo.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-sys@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Eivind Eklund wrote:
> 
> On Tue, Apr 21, 1998 at 11:54:56AM -0700, Julian Elischer wrote:
> > julian      1998/04/21 11:54:55 PDT
> >
> >   Modified files:
> >     sys/netinet          ip_fw.c
> >   Log:
> >   Remove the artificial limit on the size of the ipfw filter structure.
> >   This allows the addition of extra fields if we need them (I have plans).
> 
> This still doesn't solve the problems with IPFW (foremost, that
> extending the structure blow the userland interface).

why?
if you recompile it with a new structure...

> 
> We need a new interface - I proposed an interface to -hackers some
> time back, and got exactly NO response :-(
> 
> Eivind.

I agree on the new interface, but the limit on the structure size
was that each file rule had to fit into an mbuf.
this removes that limit and should look identical to the user 
land program.
I was considering using IOCTLS instead..
what was your suggestion?