Hi,
In the 4.x kernel, ipfilter was hardcoded before ipfw in the ip_input().
However, in the 5.x kernel, they register themselve to the pfil hook. As
there isn't a priority number during the hook up, looks like who ever
register first get to filter the packet first.
In case I want to preserve the 4.x behaviour of ipf before ipfw in the
input path, how do I reliable achieve that.
Regards,
Ming
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"