netgraph related question

Ermal Luçi ermal.luci at gmail.com
Mon Sep 25 07:49:21 PDT 2006


I am curios how difficult would it be to write an netgraph module for pf
kinda ng_ipfw.

And maybe looking for a pointer to which function this hooking needs to be
added.
After studing a little bit ng_ipfw and ipfw functions ipfw_check() is the
function which does the magic by a simple global variable, at least as far a
i can tell.
Now can it be done using the same ideas in PF too!

Ah, the reason i am asking this is just to integrate PF with ng_tag which
can do L7 filtering.

 Thanks.


More information about the freebsd-pf mailing list