Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Jun 2002 10:49:00 -0700
From:      Luigi Rizzo <rizzo@icir.org>
To:        ipfw@FreeBSD.ORG
Subject:   do we need IPFIREWALL_FORWARD to be optional ?
Message-ID:  <20020621104900.C81994@iguana.icir.org>

next in thread | raw e-mail | index | archive | help
I am fixing that part of the netinet/ stack, and i wonder why
do we need to make this optional.

Once the global variables holding its state are removed, all the
code reduces to a small set of short blocks (which are never entered
if you do not have fwd rules) scattered in ip_input.c ip_output.c
ip_fw.c and tcp_input.c, and I strongly believe that the pain and
obfuscation of having it conditionally compiled is a lot worse than
the modest code size increase.

Unless there are strong objections, I am going to make it
standard.

	cheers
	luigi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020621104900.C81994>