how does it pass in the rule sets

[Andrey V. Elsukov]

On 19.04.2014 11:45, bycn82 wrote:
> Hi,
> can someone help to explain how does the user land command `ipfw` pass
> the rule set into the hook function in the kernel? I assume that it must
> be hardcoded in somewhere, but I did not find it yet.

ipfw(8) uses raw socket and setsockopt(2)/getsockopt(2) functions to
interact with kernel. In particular, do_cmd() function from ipfw2.c does it.

-- 
WBR, Andrey V. Elsukov