Subject: Re: placement of PFIL_HOOKS filtering points
To: Darren Reed <>
From: Jason R Thorpe <>
List: tech-net
Date: 11/08/2000 07:16:26
On Wed, Nov 08, 2000 at 11:05:38PM +1100, Darren Reed wrote:

 > 4.0alpha16 has ipf -> c-code conversion in it.  Can compile into the
 > kernel or load as the LKM as non-flushable rules.

Interesting.  In my approach, I chose not to link them directly into
the kernel .. they will have to reference a couple of external routines
(mbuf accessors), but those can be resolved directly by the synthesizer.

...i.e. in mine, there will simply be a string of instructions that gets
jumped to -- there's nothing but in text in them, so this approach works
pretty well.

        -- Jason R. Thorpe <>