Re: NetBSD packet filter

[email protected] (Michael van Elst)
Newsgroups gmane.os.netbsd.devel.network
Organization Serpens User Group
Message-ID <[email protected]>
[email protected] (S Cole) writes:

>I don't know how feasible these would be with npf, but mac-address
>filtering

npf is created as an IP filter and can only intercept IP packets,
so it has no idea about MAC addresses or other protocols.


>and user/uid (login id) or group/gid filtering would be nice
>to have.

That would be rather simple, by tagging packets on the socket
layer and making npf aware of the tags. I'm not sure how costly
that would be though.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.