Subject: Re: ipfw (ala BSD/OS) and why it was cool
To: Peter Seebach <seebs@plethora.net>
From: Herb Peyerl <hpeyerl@beer.org>
List: current-users
Date: 12/20/2004 15:30:44
On 20-Dec-04, at 3:26 PM, Peter Seebach wrote:
> Filters could go at any of the following points:
> 	pre-input (the raw wire seeing a packet)
> 	input (a packet is actually directed to this machine)
> 	forward (a packet is being forwarded)
> 	output (a packet has been generated by this machine)
> 	pre-output (a packet is about to hit the actual wire)
>
> (The last name is confusing.)
>
> So far as I can tell, none of the existing tools (ipfilter, PF, 
> FreeBSD's
> ipfw) are as cool as this was.
>
> So... I doubt Wind River is going to let that code go anytime soon, 
> but I'm
> wondering, would people be interested in this?  It's actually not that 
> much
> work, once you've had the ideas.  The flexibility makes it possible to 
> easily
> write filters which are at least hard, and maybe even impossible, with 
> some
> of the other filtering tools out there.
>

I wonder where 'zpf' is these days ....  Thorpej?