site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=WsCmNuwz7EWoX8y9pI/BHmNagVlv9ftg3WEPSYAFY7s=; b=q/ooOYoTHiVaEENazWMrNVjMXft6pRjcPmtLswbLjGHN2uXpceB/DHVC465PShJ2ot UqGJXeiE+ybrWyhwF7ealoERsMpbLpSQ8BlfG17xZg/JSRuqEAMzNYBUrICFkqBDBIYp Pze1/KHOKpdi8JJ/tna5tnsJqYnN4dq7RPXNw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=Hsg0JiSw2m8iCMVVsx5x81La+wyW4DWqVNoKPMC4Z2/XtLC6BPQ3/rBUaGO+jKr8db 68ihinWaaXDvyWNDaZrE/4JF4tFFpOkt0z/4v/6GftZzX3x/QCiIdeQ0YfqNAO5x6CzH F77Pt9ohjuJhDLUcS7Pr/F+C9DjbcKSWp6AfI= Hello, just a really quick comment, imagine (when you are requesting and attaching your filter), you have 2 or 3 other "applications" using blocking sockets, what's happening? Best, On Tue, Jun 2, 2009 at 9:31 AM, Rahulkumar Tibdewal <rahulkumar_tibdewal@persistent.co.in> wrote:
Hi,
Yes!!! Rightly said so.
Well here are basic steps taken to implement feature.
1. Setup the tag value associated with this NKE in preparation for swallowing pack and re-injecting them using mbuf_tag_id_find() 2. Register the Network Kernel Extension, so it will attach the filter to every socket that system created using sflt_register() 3. Register the IPV4 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register() 4. Register the IPV6 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register() 5. Now we register our control structure so that we can be found/communicated by user level process. Using ctl_register()
-- this all is done in kext.
6. Now use setsockopt() so that block and unblock can be done. This is done Externally.
I hope this information is enough. When I block Internet, it takes 5-6 seconds. Whereas when we unblock, it works on a click. Can u suggest something.
there are ways to force the door. May I know what ways are u talking about.
Thanks Rahul
-----Original Message----- From: darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in@lists.apple.com [mailto:darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in@lists.apple.com] On Behalf Of mm w Sent: Tuesday, June 02, 2009 9:15 PM To: darwin-kernel@lists.apple.com Subject: Re: copy some kernel extensions to /tmp directory and then load that kext when program Launches
Hello, it's hard to say without seeing something there are several options, timeouts, it's not because you are asking something that the system won't delay your request (there are ways to force the door), if you could describe your mechanism? anyway you could "block/redirect" the traffic just by applying an ipfw rule, did you make a kext for making a kext (the same privilege issue? ) or there are some other reasons?, if you answer to those questions maybe people could answer, we are not behind your computer or inside your project, so people need to have a valuable description to make assumptions
Best,
On Tue, Jun 2, 2009 at 2:58 AM, Rahulkumar Tibdewal <rahulkumar_tibdewal@persistent.co.in> wrote:
Hi,
Well If you remember I was working on developing a kext which can block the access to the internet of the Standard user(client) once server drops the message block internet. It's done. But the problem is delay. It takes normally 10 seconds to execute the command of stop internet on client machine. Is it due to kext or some thing else? How can we take care of this?
Thanks Rahul
DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/rahulkumar_tibdewal%40p...
This email sent to rahulkumar_tibdewal@persistent.co.in
DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com