From nobody Sat Dec 11 05:38:04 2021 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 6DA1A18E467C for ; Sat, 11 Dec 2021 05:38:16 +0000 (UTC) (envelope-from ozkan.kirik@gmail.com) Received: from mail-ua1-x934.google.com (mail-ua1-x934.google.com [IPv6:2607:f8b0:4864:20::934]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4J9xQ01l8zz4sBq; Sat, 11 Dec 2021 05:38:16 +0000 (UTC) (envelope-from ozkan.kirik@gmail.com) Received: by mail-ua1-x934.google.com with SMTP id w23so20392240uao.5; Fri, 10 Dec 2021 21:38:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=kfGxB3z2nnMpcYionZ0bwkjLEPF1wMh2OXV47xW+JpM=; b=X0awBjLMQZAIUn5N+Sk9ZWjQUJCVSTpcKpFnY3tsKtMocW5dKS9n4YE2y5V6qksDuF Yy+HgltYbtBKpFNWb1IZkiuylufztkcLRWlR7SKOoL4xGpSUGHzZ8JVDlW6yBkVbAE6t h3sQm8a8RdwBMA4jxPy9StPMYR/BCPNcib3EsEmFLWf3cXu3qdvILOEdGmTb0/vtqXYt ncwMaIaTY5lwCJ5HwVndVI3lD+5BLfsIdqP4+xj8Fee2Mbr9yIXMyqj//sS1mrwfHA5/ /pBn2MYVSn2y4QJtFQYF11dpw7RWE/SAkaSPnxbEqRM9bgZos7Ysk6eE7lOhyubcEg8/ 52tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=kfGxB3z2nnMpcYionZ0bwkjLEPF1wMh2OXV47xW+JpM=; b=VfkPTezIiMJ722yR27aX0QCXOEECFkEdm8JzGiIv+A24qthyTx8FcP/tpJe0iNXPtF LLa4Dw8mgJs9Hqmjpb4lJK3iCMSfkb09difAEW/1dng/Q74nIivQds4PMs4nML/377ZX Hm/cEPZmHBlizP+CDn1fJncl4tOipQv9a2ITUyGS/iRNMVJbWQ3/Jg61CcRtMPJjEh30 2xHAWzUxK46ACoVILpJYXvivd1x1suXfP04JK0YmiBVvQydInBNDdWqU9e5qfxtFsN/A +dI0Ki3HkeiGNIYs/pXi3uDZfsoH0EohmLP5sKLNbN2ddQyftvMONL8bH/cpT0d6o/CE 9Qdg== X-Gm-Message-State: AOAM533UvWZGUCwqCn+d3mahgrL4Q1rceeJEmeggqHQ5JQqRwwatGNic HiEb1zhSk/QrBvZMtgNexXmzTJr0nXuRe/RzoVA0b5Zg7xw= X-Google-Smtp-Source: ABdhPJyEIrgTUPhZgUoknHcDjN1lGN+z3wDvypySD0+ngN0/i23PM0GK3h2o462M2XEjA+SVW11QaqmqfaV4S3j+buk= X-Received: by 2002:a05:6102:548f:: with SMTP id bk15mr19663483vsb.31.1639201095461; Fri, 10 Dec 2021 21:38:15 -0800 (PST) List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@freebsd.org MIME-Version: 1.0 References: <861r36xzpe.fsf@phe.ftfl.ca> <861r2l914z.fsf@phe.ftfl.ca> <50ce89e135767d11adc2f90a602b28ce@FreeBSD.org> In-Reply-To: <50ce89e135767d11adc2f90a602b28ce@FreeBSD.org> From: =?UTF-8?B?w5Z6a2FuIEtJUklL?= Date: Sat, 11 Dec 2021 08:38:04 +0300 Message-ID: Subject: Re: Call for Foundation-supported Project Ideas To: Lars Engels Cc: FreeBSD Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 4J9xQ01l8zz4sBq X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[] X-ThisMailContainsUnwantedMimeParts: N freebsd-pf: matching and logging receive interface and xmit interface in single rule (ipfw has support) I'm looking for a solution to match a traffic received on igb0 and xmit on = igb1. According to man page, ipfw(8) supports this syntax: ipfw add deny ip from any to any out recv ed0 xmit ed1 The recv interface can be tested on either incoming or outgoing packets, while the xmit interface can only be tested on outgoing packets. So out is required (and in is invalid) whenever xmit is used. Is it possible to add support to pf for this feature like ipfw? Have a nice day On Fri, Dec 10, 2021 at 1:16 PM Lars Engels wrote: > > Am 2021-12-09 19:25, schrieb =C3=96zkan KIRIK: > > bsnmpd: monitoring jails (event with different vnet) resources like > > interfaces, cpu usage etc. > > > > I don't have an account to modify wiki. thanks > > > I added this to the wiki page. >