On Sat, Apr 17, 2004 at 03:17:42AM -0500, Mark Nipper wrote: M> Which, incidentally, was why I chose OpenBSD over FreeBSD M> for the Snort box/firewall I was working on. The bridge M> manipulations made perfect sense the first time I looked at them M> and PF did everything it could normally do (including the M> redirects to localhost), even over a bridged interface. I even M> ended up in a debate with a die hard FreeBSD'er who was mumbling M> about whipping up some code to provide similar functionality with M> ng. And I was like great, then go code it! I'll just start M> implementing this other solution now which already works and M> required no coding on my part, which admittedly, is not my strong M> suit. Needless to say, I was finished first. You can play with ng_etf/ng_tee/ng_socket/ng_ksocket to inject traffic from bridge into userland towards snort. Just sit some time thinking of netgraph nodes and you'll find solution. -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPEReceived on Fri Apr 16 2004 - 23:36:15 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:51 UTC