FreeBSD equivalent of Linux's "xt_bpf" filtering module

Question

In Linux 3.9 there's a packet filter module called xt_bpf that can take compiled BPF bytecode and use it directly in an iptables rule.

Is there any equivalent for FreeBSD's ipfw system?

score 0 · Accepted Answer · edited Jan 05 '16 at 12:13

0

You can try netgraph node ng_bpf.

edited Jan 05 '16 at 12:13

jimmij

answered Jan 05 '16 at 11:43

user1700494

thanks - looks useful. Do you happen to have any pointers on how to integrate `netgraph` with `ipfw`? – Alnitak Jan 05 '16 at 12:03
You need to use ng_ipfw. Alas i have no exapmles right now. – user1700494 Jan 05 '16 at 13:23
thanks anyway - unfortunately the documentation for `ng_ipfw` appears to be very poor :( – Alnitak Jan 05 '16 at 13:24

1 Answers1