Is there an API for ipfw?



Hi!

I'm writing an application that, needs to be able to quickly alter the
bandwidth between another machine and the host.

The only way I can do that -- without another machine's cooperation -- is by
using the firewall, such as the dummynet functionality of ipfw.

Is there any way to create/alter such a pipe from a C-program without using
system("ipfw ....")?

If not ipfw, perhaps, other firewall modules in FreeBSD-6.x?

Thanks a lot!

-mi

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: RFC: my firewall ruleset(s)
    ... IPFW numbers rules that increment by 1. ... > The reasoning behind this is so I have a single firewall script for all ... Depending on the rc.conf entries on that server, the firewall ...
    (freebsd-questions)
  • RE: What exactly is ipfilter?
    ... FBSD comes with two firewall applications built into the base ... IPFW and IPFILTER. ...
    (freebsd-questions)
  • [HOWTO] IPFW: Vector-Based Modularity
    ... Complex Firewall ... For this purpose the local host should be considered an interface of its own in the form of the IPFW alias, ... The IPFW ruleset begins with a series of skipto rules directing matching traffic to a rule module. ... 00400 set 0 deny ip from any to any ...
    (freebsd-questions)
  • re: firewall high-load performance
    ... against ipfw, but I suspect that any difference in performance is pretty ... If you're just doing packet filtering and using a fairly run of ... was related to use of dummynet for bandwidth management. ... Just one more reason pf is my favorite firewall. ...
    (freebsd-questions)
  • Re: ipfw question (ip vs tcp)
    ... The ipfw file has a line like this in it: ... > Either way I can then have full user ftp sessions with this server. ... Since the second channel runs on random ports, it is often quite hard to get an FTP session working ... Configure the firewall to allow the same range incoming. ...
    (comp.unix.bsd.freebsd.misc)