ipfw fwd: woud it be possible to continue processing rest of rules after match ?

Ari Suutari ari at suutari.iki.fi
Wed Jun 15 12:59:06 GMT 2005


Hi,

Currently the ipfw fwd rules work so that the packet
is accepted when fwd rule matches.

Would it be possible just tag the packet with
information about next_hop and just continue processing the
rules ? This would make complex rulesets with policy-based
routing much simpler, since one could just have relevat
fwd statments at beginning of rule sets and then
filter the packets in usual way.

	Ari S.


More information about the freebsd-ipfw mailing list