IPFIREWALL_FORWARD

[Julian Elischer]

n j wrote:
>> it's needed for the functionality.
>> you need to slightly change the behaviour or the existing stack in quite a
>> number of places to handle a forwarded packet.
> 
> Sorry for catching up with the thread so late, I was without Internet
> connection for the last couple of days.
> 
> Thanks for all the replies so far, I've got just one more question: is
> it correct that pf (as loadable module) has this forward (aka
> route-to) functionality without needing the kernel recompile? If so,
> it might be that final push for me to switch from ipfw to pf.
> 
> Regards,


I can't answer for pf..  this is the ipfw mailing list. :-)


If they do have the same functionality then they will need the
same changes. If they do something different (e.g. changing the 
packet) then they may be able to do a subset of the same thing.