Proposal regarding the RFC 3514 handling

[Gordon Tetlow]

On Thu, Apr 03, 2003 at 11:12:39PM +1000, Darren Reed wrote:
> In some email I received from Peter Wemm, sie wrote:
> [...]
> > On the other hand, we have so much cruft in the ip input/output code paths
> > (2 or 3 different packet filter hooks etc), this is tiny by comparison.
> 
> Now that April 1 is far behind, I'll mention that I've been looking
> at ways to amalgamate the mechanisms used by ipfw/ipfilter to address
> this problem.  Without being insulting, my 5 second grab on this is
> that ipfw has grown like a tumour inside the ip stack with bits and
> pieces hooked in here and there and everywhere (exageration.)  That
> is to say I think should be and can be better than they are.

Not to mention that the last time I tried to build a kernel without
INET, all the errors seemed to be a result of ipfw (iirc, this was a
long time ago, it might be fixed now).

-gordon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/cvs-all/attachments/20030403/c5423c43/attachment.bin