Re: NetBSD packet filter

[mlelstv%serpens.de@localhost (Michael van Elst)]

scole%sdf.org@localhost (S Cole) writes:

>I don't know how feasible these would be with npf, but mac-address
>filtering

npf is created as an IP filter and can only intercept IP packets,
so it has no idea about MAC addresses or other protocols.


>and user/uid (login id) or group/gid filtering would be nice
>to have.

That would be rather simple, by tagging packets on the socket
layer and making npf aware of the tags. I'm not sure how costly
that would be though.