On Mon, 13 Nov 2006, Bjoern A. Zeeb wrote:
bz 2006-11-13 19:07:33 UTC
FreeBSD src repository
Modified files:
sys/netinet ip_fw2.c
Log:
Add SCTP as a known upper layer protocol over v6.
There is another 'problem' the way things work at the moment.
We have over 100 IPPROTO_* defined in in.h. We really do not
want to permit any single one and add it to the switch in
ip_fw2.c/ipfw_chk.
Basically at that point we can have:
1 extension headers (we need to know about them to get to 2 or 3)
2 upper layer protocols we know about and want to do/allow more
specific filtering (like tcp/udp/..)
3 upper layer protocols ipfw doesn't know about
In case anyone has a good idea what to do with everything in cat 3
feel free to discuss/commit it;)
--
Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
