Displaying 1 result from an estimated 1 matches for "iface_match".
2008 Jul 29
3
ipfw "bug" - recv any = not recv any
...> for packets originated on the local machine.
/usr/src/sys/netinet/ip_fw2.c -- seemed to be the place, but the start
of the s/r that caught my eye is not immediately suggesting that there
is a way to match a null ifp without patching code as its trapped before
the check is done
static int
iface_match(struct ifnet *ifp, ipfw_insn_if *cmd)
{
if (ifp == NULL) /* no iface with this packet, match fails */
return 0;
/* Check by name or by IP address */
if (cmd->name[0] != '\0') { /* match by name */
/* Check name */
i...