*BSD News Article 32910


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!msuinfo!agate!howland.reston.ans.net!spool.mu.edu!nigel.msen.com!cybernet.com!root
From: root@cybernet.com (Operator (aka Mark))
Newsgroups: comp.os.386bsd.apps
Subject: Re: Routing Software
Date: 19 Jul 1994 14:52:09 GMT
Organization: Cybernet Systems, Inc.
Lines: 15
Distribution: world
Message-ID: <30gpaq$j0j@nigel.msen.com>
References: <303rms$a0s@sol.sun.csd.unb.ca>
NNTP-Posting-Host: 192.245.33.55


Yes, there is an IPFIREWALL thing available for FreeBSD which goes into the
kernel.  It checks incoming and outgoing packets, as well as packets meant to be
routed (if "options GATEWAY" was compiled into the kernel).

You can find it at freebsd.cdrom.com in /pub/FreeBSD/incoming (I think).  If you
cannot get it there, I'vi put the 1.1.5.1 version on cybernet.com:/pub/incoming.

I have the source for a 1.1.5.1 kernel (it modifies /sys/netinet/{raw_ip.c,
ip_input.c}.  The firewall will drop packets on the floor that are not supposed
to pass through (the sender is not even notified), as if they were bad packets.


-Mark Taylor
mtaylor@cybernet.com