Hi,

In the 4.x kernel, ipfilter was hardcoded before ipfw in the ip_input(). However, in the 5.x kernel, they register themselve to the pfil hook. As there isn't a priority number during the hook up, looks like who ever register first get to filter the packet first.

In case I want to preserve the 4.x behaviour of ipf before ipfw in the input path, how do I reliable achieve that.

Regards,
Ming
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to