Re: UDP catchall

It's possible using ipfw to mostly implement this, and with an upcoming change, possible to completely implement this.

the "uid" function of ipfw can act as a "does there exist a socket to which this packet would go?" test.
and a variant of it called "for_me" that I am adding (we use it at work) does this even better.

so, basically,

yyy: skipto xxx ip from any to-me
yyy+1: fwd 127.0.0.1,1234
xxx:

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: UDP catchall
    ... It's possible using ipfw to mostly implement this, and with an upcoming change, possible to completely implement this. ... and a variant of it called "for_me" that I am adding does this even better. ... skipto xxx ip from any to-me ...
    (freebsd-net)
  • Re[2]: ipfw question
    ... It's funny. ... This variant: ... was accepted by ipfw but resulted in the rule: ... ipfw add count from IP1 to not IP2,IP3 ...
    (FreeBSD-Security)