libiptc equivalent in FreeBSD ipfw
    Dan Nelson 
    dnelson at allantgroup.com
       
    Tue May 24 07:40:35 PDT 2005
    
    
  
In the last episode (May 23), C.G.Senthilkumar. said:
> I want to add some rules to the ipfw kernel table directly from my
> program rather than going through the ipfw user-space program. Is
> there some control library analogous to libiptc in Linux's
> netfilter/iptables that would let me do that?
> 
> If yes, where could I learn more about it?
No, /usr/sbin/ipfw is the only "API" available.  If you don't want the
overhead of forking a new process every time you want to add or change
a rule, you can fork an ipfw in the background when your program
starts: "ipfw /dev/fd/0" will take commands on stdin and print to
stdout.
-- 
	Dan Nelson
	dnelson at allantgroup.com
    
    
More information about the freebsd-questions
mailing list