site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Those familiar with the KPIs may not be familiar with pf. -josh On Oct 29, 2006, at 9:55 PM, Joseph Gorse wrote: Hello all, _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com An interface filter or an IP filter are the most likely places to tie in to the stack. I know nothing of pf, so I can't really help with a better answer. I'm posting my intention to port pf (4) (http://www.freebsd.org/cgi/ man.cgi?query=pf&sektion=4) to an NKE for use as a replacement or complement to the current ipfw2. According to the Network Kernel Extensions Programming Guide (http://developer.apple.com/documentation/Darwin/Conceptual/ NKEConceptual/index.html) it seems I might use an Interface Filter KPI mechanism to accomplish such a task. So I ask those who are more familiar with NKEs, is this a reasonable task, am I sane to try it, and do you have any words of advice? Thank you for your time, Joe Gorse _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/jgraessley% 40apple.com This email sent to jgraessley@apple.com smime.p7s