In the last episode (Jul 14), Matin Tamizi said: > How can I use the preprocessing feature in ipfw to run incoming > packets through my own C program? How can my C program communicate > to ipfw to drop (deny) and packet or connection?
If you're talking about the -p flag to ipfw, that's just for parsing config files (like what cpp does with #include and #define for C). Take a look at divert sockets for a way to capture packets from ipfw into a program, and then reinject (or drop) them. See the divert and ipfw manpages. natd uses divert sockets, so you can look at its source to see how they work. -- Dan Nelson [EMAIL PROTECTED] _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"