Mailing Lists: Apple Mailing Lists
 Image of Mac OS face in stamp
Re: New NKE
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: New NKE

On Thu, Mar 20, 2003 at 11:10:20AM -0800, Joshua Graessley wrote:
[snip]
>
> If I remember correctly, there were some licensing issues with the
> ipfilter code which made our decision between ipfilter and ipfw pretty
> simple.
>
> The firewall ties in to the stack at a number of points, whether it be
> ipfw or ipfilter. I think ipfilter tied in at different points from
> where ipfw tied in. We were concerned about the licensing issues with
> the ipfilter code so we eliminated all trace of that code from our
> stack including the points where ipfilter tied in to the stack. This
> means that porting ipfilter will be a non-trivial amount of work. You
> will probably have to build some wrappers around a protocol filter to
> make things look right to the ipfilter code even though the point where
> ipfilter is getting the packets is very different.
>

Has anyone looked at port pf from OpenBSD? It has some very nice
features, and the license is certainly not a problem.


-eric
_______________________________________________
darwin-development mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-development
Do not post admin requests to the list. They will be ignored.
References: 
 >New NKE (From: Ben Stahlhood <email@hidden>)
 >Re: New NKE (From: Joshua Graessley <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2011 Apple Inc. All rights reserved.