On Wed, May 22, 2002 at 12:31:00PM -0400, Craig Rodrigues wrote:
> On Wed, May 22, 2002 at 02:43:23AM -0700, Luigi Rizzo wrote:
> > I think the TOS matching is implemented in ipfw in 5.0, not 4.6.
> >
> > it should not be too hard to merge it into RELENG_4.
> >
> > cheers
> > luigi
>
> Cool! Could you merge this stuff into RELENG_4, or are there more
> restrictions on merging things into STABLE these days?
Yes. Code freeze for 4.6-RELEASE.
> If it is not possible, if I do it myself, do I just need to
> download the files in /usr/src/sbin/ipfw from the CURRENT in CVS?
No. sbin/ipfw is just the userland command for modifying rules. The
actual firewall code lives in sys/netinet/ip_fw.{c,h}.
There are old patches against 4.x for filtering on DIFSERV bits
floating around. Check the archives of freebsd-security@ and
freebsd-ipfw@. I think I may have some somewhere.
--
Crist J. Clark | [EMAIL PROTECTED]
| [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message