Re: Firewalling Rules (Was: Linux Kernels)

Andi Kleen (ak@muc.de)
31 Oct 1997 17:39:37 +0100


Matthew Kirkwood <weejock@ferret.lmh.ox.ac.uk> writes:

> So -- Am I a fool, or should I make some hacking time this weekend? :)

OSF/Mach has this for the in-kernel BPF :) The only stupid thing is that
the actual rule compiler is in the kernel - ugh. I think it should be
fairly easy to modify this module to generate insmodable modules (and not
to run in the kernel of course). The compiler is fairly clever: it does
global register allocation and it's more or less portable. I guess you
could get it running in one weekend ;)

-Andi