Hello Alexey,
Sunday, November 23, 2003, 2:20:05 PM, you wrote:
I found the idea of tagging in PF very interesting, and we are
interesting in using it for policy definitions, but here is the deal:
OVER THE INTERNET!...i know i knowthe panipulated or tagged
packets, wil be capsulated
On Mon, Nov 24, 2003 at 10:51:22PM +0100, Kifah Abbad wrote:
How about if i use IP-V6? would that give me more space? comparible to
space i have using pf-tagging? (in comparison to the 4 bits given by
TOS)
IP (or TCP) options would have enough space. If you need to do it in
userland, a raw
On Monday, Nov 24, 2003, at 13:51 US/Pacific, Kifah Abbad wrote:
there is already some kind of tagging in IP: tos value.
unfortunately, pf can not handle tos value for own purposes. from the
other side, tos width is 4 bits only so it can not handle much of
useful information (pf tags, for
I found the idea of tagging in PF very interesting, and we are
interesting in using it for policy definitions, but here is the deal:
OVER THE INTERNET!...i know i knowthe panipulated or tagged
packets, wil be capsulated into Ipsec...so problems like fragmantation
or routers shouldn'T be