DragonFlyBSD

​I did a full test of the in-kernel NAT​ these days, fixed all the panic
scenarios I met.

https://github.com/bycn82/dfly/commits/master
<https://github.com/bycn82/dfly/commits/master>

Need users to test it :(

Hi,

Regards,
Bill Yuan

On 8 December 2014 at 11:55, bycn82 <bycn82@gmail.com> wrote:

*Hi,action opcodes 'tag' and 'untag', filter opcode 'tagged' ported from
FreeBSD. *

in FreeBSD:

ipfw add count tag 1 icmp from any to any

here will be.

ipfw add tag 1 icmpsource can be found
via:https://github.com/bycn82/dfly/commits/master
<https://github.com/bycn82/dfly/commits/master>

• (it can be easily changed if the FreeBSD way is better)*

Regards,bycn82

On Fri, Dec 5, 2014 at 2:35 PM, bycn82 <bycn82@gmail.com> wrote:

Here is the link of the changes.

*https://github.com/bycn82/dfly/commit/cf0cb0df23ef84da3845e73e03d3efde861049b9
<https://github.com/bycn82/dfly/commit/cf0cb0df23ef84da3845e73e03d3efde861049b9> *

On Thu, Dec 4, 2014 at 9:25 AM, Justin Sherrill <
justin@shiningsilence.com> wrote:

For submitting, there's the submit@dragonflybsd.org mailing list.
Sending a diff, or (probably best) a link to a git repo that has the
changes is what you need to do.

I don't have answers for the other questions.

On Wed, Dec 3, 2014 at 8:22 AM, bycn82 <bycn82@gmail.com> wrote:

Hi All,

As mentioned in my previous email, I was working on rewriting the ipfw
firewall recently. Now below 2 things has been done.

1. In-kernel NAT ported from FreeBSD.
2. Separate the logic into different module.

Please guide me on how to submit the code to Dragonfly. Also please
share information with me on below direction. that is on my plan.

1. Multi-routing table (FIB in FreeBSD)
2. Policy routing.
3. Sample or a generic framework of L7 filter module. (Maybe its
better to keep stay in user-land because DPI will cause lots of resources).

Regards,
Bill Yuan