Re: Tagging packets over the net

2003-11-24 Thread Kifah Abbad
Hello Alexey, Sunday, November 23, 2003, 2:20:05 PM, you wrote: I found the idea of tagging in PF very interesting, and we are interesting in using it for policy definitions, but here is the deal: OVER THE INTERNET!...i know i knowthe panipulated or tagged packets, wil be capsulated

Re: Tagging packets over the net

2003-11-24 Thread Daniel Hartmeier
On Mon, Nov 24, 2003 at 10:51:22PM +0100, Kifah Abbad wrote: How about if i use IP-V6? would that give me more space? comparible to space i have using pf-tagging? (in comparison to the 4 bits given by TOS) IP (or TCP) options would have enough space. If you need to do it in userland, a raw

Re: Tagging packets over the net

2003-11-24 Thread Trevor Talbot
On Monday, Nov 24, 2003, at 13:51 US/Pacific, Kifah Abbad wrote: there is already some kind of tagging in IP: tos value. unfortunately, pf can not handle tos value for own purposes. from the other side, tos width is 4 bits only so it can not handle much of useful information (pf tags, for