Re: Source Routing

From: Michael Sierchio (kudzu_at_tenebras.com)
Date: 12/30/03

  • Next message: afshin: "Re: Source Routing"
    Date: Tue, 30 Dec 2003 08:32:53 -0800
    To: net@FreeBSD.org
    
    

    Andre Oppermann wrote:

    > Ruslan Ermilov wrote:

    >>What is missing in ipfw(8) and its ``fwd'' option from being a
    >>successful implementation of policy routing?
    >
    >
    > In the technical sense it is. For larger systems you want automatic
    > configuration from a routing daemon. ipfw also has its limits when
    > it comes to a large number of prefixes which are changing all the
    > time.

    A policy or multi-protocol routing daemon can *effect* the desired
    policy via ipfw. My original notion was to do this via divert
    sockets, but for appliance devices this requires horsepower which
    is not available, and involves too much kernel-userland packet
    copying.

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"


  • Next message: afshin: "Re: Source Routing"

    Relevant Pages

    • Re: Problem with "ipfw flush"
      ... the system freezes up and locks me out when I do: ... I haven't used IPFW in a while but if I recall right IPFW has a default ... That should allow you flush and load your ruleset. ... to look into changing the default policy to accept. ...
      (freebsd-questions)
    • Re: Problem with "ipfw flush"
      ... I haven't used IPFW in a while but if I recall right IPFW has a default policy of drop. ... So when you flush the ruleset your pass rules are all gone. ... Opps I am sorry, I got pulled away while reading your original email, guess I didn't finish reading it. ...
      (freebsd-questions)