Subject: Re: ipfw (ala BSD/OS) and why it was cool
To: Peter Seebach <seebs@plethora.net>
From: Herb Peyerl <hpeyerl@beer.org>
List: current-users
Date: 12/20/2004 15:30:44
On 20-Dec-04, at 3:26 PM, Peter Seebach wrote:
> Filters could go at any of the following points:
> pre-input (the raw wire seeing a packet)
> input (a packet is actually directed to this machine)
> forward (a packet is being forwarded)
> output (a packet has been generated by this machine)
> pre-output (a packet is about to hit the actual wire)
>
> (The last name is confusing.)
>
> So far as I can tell, none of the existing tools (ipfilter, PF,
> FreeBSD's
> ipfw) are as cool as this was.
>
> So... I doubt Wind River is going to let that code go anytime soon,
> but I'm
> wondering, would people be interested in this? It's actually not that
> much
> work, once you've had the ideas. The flexibility makes it possible to
> easily
> write filters which are at least hard, and maybe even impossible, with
> some
> of the other filtering tools out there.
>
I wonder where 'zpf' is these days .... Thorpej?