I now hope to have resolved the last of the issues with retrieving filter rules for ipfstat using ioctl. At some point in the future I will look at making some changes to improve the performance of this but for now, it seems to work fine with the problems mentioned here (so far :) fixed.
I know there were some patches posted to make things compile on Tru64, but the way I fixed things was a little different. The version of Tru64 I tested with was 5.1 patch level 732. For those that are heavily into policy based routing, I dug in and fixed some problems with interface matching involving keep state. I've added a regression test that partially tests this feature interaction. Darren http://coombs.anu.edu.au/~avalon/ip_fil4.1.18.tar.gz http://coombs.anu.edu.au/~avalon/patch-4.1.18.gz MD5 (ip_fil4.1.18.tar.gz) = 6ce7f842aa4b972f84979ce82e868a5d 4.1.18 - Released 18 February 2007 fix compiling on Tru64 fix listing out filter rules with ipfstat (delete token at end of the list and detect zero rule being returned.) fix extended flushing of NAT tables (was clearing out state tables) fix null-pointer deref in hash table lookup fix NAT and stateful filtering with to/reply-to on destination interface 4.1.17 - Released 20 January 2007
