Subject: Re: placement of PFIL_HOOKS filtering points
To: Darren Reed <darrenr@reed.wattle.id.au>
From: Jason R Thorpe <thorpej@zembu.com>
List: tech-net
Date: 11/08/2000 07:16:26
On Wed, Nov 08, 2000 at 11:05:38PM +1100, Darren Reed wrote:
> 4.0alpha16 has ipf -> c-code conversion in it. Can compile into the
> kernel or load as the LKM as non-flushable rules.
Interesting. In my approach, I chose not to link them directly into
the kernel .. they will have to reference a couple of external routines
(mbuf accessors), but those can be resolved directly by the synthesizer.
...i.e. in mine, there will simply be a string of instructions that gets
jumped to -- there's nothing but in text in them, so this approach works
pretty well.
--
-- Jason R. Thorpe <thorpej@zembu.com>