Project Description

FreeBSD lacks sophisticated layer2 and mixed layer2-layer3 filtering. ipfw performs mixed layer2-layer3 packet filtering using its own hooks in ether_demux/ether_output_frame and if_bridge. pf can't filter by layer2 addresses. I propose to improve both ipfw and pf to filter by layer2 addresses.

Recent patches can be found in github repository

Perforce repository

Blog

Milestones

general

ipfw

pf

GlebKurtsov/Improving_layer2_filtering (last edited 2010-01-17 11:05:51 by GlebKurtsov)