mirror of
https://git.FreeBSD.org/src.git
synced 2024-12-18 10:35:55 +00:00
4b9840932d
Ipfw processing of frames at layer 2 can be enabled by the sysctl variable net.link.ether.ipfw=1 Consider this feature experimental, because right now, the firewall is invoked in the places indicated below, and controlled by the sysctl variables listed on the right. As a consequence, a packet can be filtered from 1 to 4 times depending on the path it follows, which might make a ruleset a bit hard to follow. I will add an ipfw option to tell if we want a given rule to apply to ether_demux() and ether_output_frame(), but we have run out of flags in the struct ip_fw so i need to think a bit on how to implement this. to upper layers | | +----------->-----------+ ^ V [ip_input] [ip_output] net.inet.ip.fw.enable=1 | | ^ V [ether_demux] [ether_output_frame] net.link.ether.ipfw=1 | | +->- [bdg_forward]-->---+ net.link.ether.bridge_ipfw=1 ^ V | | to devices |
||
|---|---|---|
| .. | ||
| bpf_compat.h | ||
| bpf_filter.c | ||
| bpf.c | ||
| bpf.h | ||
| bpfdesc.h | ||
| bridge.c | ||
| bridge.h | ||
| bsd_comp.c | ||
| ethernet.h | ||
| fddi.h | ||
| if_arc.h | ||
| if_arcsubr.c | ||
| if_arp.h | ||
| if_atm.h | ||
| if_atmsubr.c | ||
| if_disc.c | ||
| if_dl.h | ||
| if_ef.c | ||
| if_ethersubr.c | ||
| if_faith.c | ||
| if_fddisubr.c | ||
| if_gif.c | ||
| if_gif.h | ||
| if_ieee80211.h | ||
| if_iso88025subr.c | ||
| if_llc.h | ||
| if_loop.c | ||
| if_media.c | ||
| if_media.h | ||
| if_mib.c | ||
| if_mib.h | ||
| if_ppp.c | ||
| if_ppp.h | ||
| if_pppvar.h | ||
| if_sl.c | ||
| if_slvar.h | ||
| if_sppp.h | ||
| if_spppsubr.c | ||
| if_stf.c | ||
| if_stf.h | ||
| if_tap.c | ||
| if_tap.h | ||
| if_tapvar.h | ||
| if_tun.c | ||
| if_tun.h | ||
| if_tunvar.h | ||
| if_types.h | ||
| if_var.h | ||
| if_vlan_var.h | ||
| if_vlan.c | ||
| if.c | ||
| if.h | ||
| intrq.c | ||
| intrq.h | ||
| iso88025.h | ||
| net_osdep.c | ||
| net_osdep.h | ||
| netisr.h | ||
| pfil.c | ||
| pfil.h | ||
| pfkeyv2.h | ||
| ppp_comp.h | ||
| ppp_deflate.c | ||
| ppp_defs.h | ||
| ppp_tty.c | ||
| radix.c | ||
| radix.h | ||
| raw_cb.c | ||
| raw_cb.h | ||
| raw_usrreq.c | ||
| route.c | ||
| route.h | ||
| rtsock.c | ||
| slcompress.c | ||
| slcompress.h | ||
| slip.h | ||
| zlib.c | ||
| zlib.h | ||