Subject: Re: ipfw (ala BSD/OS) and why it was cool
To: Peter Seebach <firstname.lastname@example.org>
From: Herb Peyerl <email@example.com>
Date: 12/20/2004 15:30:44
On 20-Dec-04, at 3:26 PM, Peter Seebach wrote:
> Filters could go at any of the following points:
> pre-input (the raw wire seeing a packet)
> input (a packet is actually directed to this machine)
> forward (a packet is being forwarded)
> output (a packet has been generated by this machine)
> pre-output (a packet is about to hit the actual wire)
> (The last name is confusing.)
> So far as I can tell, none of the existing tools (ipfilter, PF,
> ipfw) are as cool as this was.
> So... I doubt Wind River is going to let that code go anytime soon,
> but I'm
> wondering, would people be interested in this? It's actually not that
> work, once you've had the ideas. The flexibility makes it possible to
> write filters which are at least hard, and maybe even impossible, with
> of the other filtering tools out there.
I wonder where 'zpf' is these days .... Thorpej?