[patch] ipfw packet tagging

2006-05-10 Thread Andrey V. Elsukov
Hi, All! I have written a small patch for a packets tagging with ipfw. The description of OpenBSD packet tagging is here: http://www.openbsd.org/faq/pf/tagging.html An IPFW tags is not compatible with PF tags. This feature can be usable with some netgraph modules. We can create a netgraph node

[patch] ipfw packet tagging

2006-05-12 Thread Vadim Goncharov
Hi, All! I've tried Andrey Elsukov's ipfw "tag/tagged" patches from: http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ Tested on 5.5-PRERELEASE production server with moderate load - rock stable [I've also looked through the code - patch is small, so it simply can't be any bugs there ;)]. P

Re: [patch] ipfw packet tagging

2006-05-12 Thread Patrick Tracanelli
Vadim Goncharov wrote: Hi, All! I've tried Andrey Elsukov's ipfw "tag/tagged" patches from: http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ Tested on 5.5-PRERELEASE production server with moderate load - rock stable [I've also looked through the code - patch is small, so it simply can't b

Re: [patch] ipfw packet tagging

2006-05-12 Thread Luigi Rizzo
On Fri, May 12, 2006 at 10:32:22AM -0300, Patrick Tracanelli wrote: > Vadim Goncharov wrote: > > Hi, All! > > > > I've tried Andrey Elsukov's ipfw "tag/tagged" patches from: > > http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ > > > > Tested on 5.5-PRERELEASE production server with moderate

Re: [patch] ipfw packet tagging

2006-05-12 Thread Vadim Goncharov
12.05.06 в 20:53 Luigi Rizzo wrote: > I've tried Andrey Elsukov's ipfw "tag/tagged" patches from: > http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ > > Tested on 5.5-PRERELEASE production server with moderate > load - rock stable [I've also looked through the code - patch > is small, so it

Re: [patch] ipfw packet tagging

2006-05-12 Thread Vadim Goncharov
12.05.06 в 20:53 Luigi Rizzo в своём письме писал(а): > I've tried Andrey Elsukov's ipfw "tag/tagged" patches from: > http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ > > Tested on 5.5-PRERELEASE production server with moderate > load - rock stable [I've also looked through the code - patch

Re: [patch] ipfw packet tagging

2006-05-12 Thread Luigi Rizzo
On Fri, May 12, 2006 at 10:50:10PM +0700, Vadim Goncharov wrote: > A question about features: is it worth adding functionality of matching > range of tags? For example: > > ipfw add pass ip from any to any tagged 1-5,10,20 i think it is a useful feature, and if you reuse the existing code for ma

Re: [patch] ipfw packet tagging

2006-05-13 Thread Vadim Goncharov
12.05.06 22:56 Luigi Rizzo wrote: A question about features: is it worth adding functionality of matching range of tags? For example: ipfw add pass ip from any to any tagged 1-5,10,20 i think it is a useful feature, and if you reuse the existing code for matching port ranges etc to implement

Re: [patch] ipfw packet tagging

2006-05-13 Thread Julian Elischer
Vadim Goncharov wrote: 12.05.06 22:56 Luigi Rizzo wrote: A question about features: is it worth adding functionality of matching range of tags? For example: ipfw add pass ip from any to any tagged 1-5,10,20 i think it is a useful feature, and if you reuse the existing code for matching por

Re: [patch] ipfw packet tagging

2006-05-13 Thread Vadim Goncharov
13.05.06 @ 16:38 Julian Elischer wrote: A question about features: is it worth adding functionality of matching range of tags? For example: ipfw add pass ip from any to any tagged 1-5,10,20 i think it is a useful feature, and if you reuse the existing code for matching port ranges etc to i

Re: [patch] ipfw packet tagging

2006-05-13 Thread AT Matik
On Saturday 13 May 2006 07:08, Vadim Goncharov wrote: > > > > would be cool however. > > May be, but I can't imagine a real situation where it can be useful, > as tables already contain IP adresses. Can you give a real-life > example where it helps ? cool = good may be = wonderful can't imagine =

Re: [fbsd] [patch] ipfw packet tagging

2006-06-21 Thread Jeremie Le Hen
Hi Andrey, On Wed, May 10, 2006 at 10:41:14AM +0400, Andrey V. Elsukov wrote: > Hi, All! > > I have written a small patch for a packets > tagging with ipfw. > > The description of OpenBSD packet tagging is here: > http://www.openbsd.org/faq/pf/tagging.html > > An IPFW tags is not compatible wit

Re: [fbsd] [patch] ipfw packet tagging

2006-06-21 Thread Vadim Goncharov
21.06.06 @ 16:41 Jeremie Le Hen wrote: Looking at the patch lets me see that you are using the generic mbuf tags. This means the tag should be available along the packet's trip through the kernel. Would it be possible to slightly modify the routing code in order to make those tags a routing cr

Re: [fbsd] [patch] ipfw packet tagging

2006-06-21 Thread Andrey V. Elsukov
Jeremie Le Hen wrote: trip through the kernel. Would it be possible to slightly modify the routing code in order to make those tags a routing criteria ? You can use tags with a fwd rules, like a: # ipfw add fwd $gw_addr ip from any to any tagged $N And as i know, oleg@ has committed a new