3 ms·
Dissecting OpenBSD's divert(4)
- mben 12y agoCheck pf-diverters [1]. We are using them in our openbsd firewalls in order to block unwanted connections. [1] https://github.com/echothrust/pf-diverters https://github.com/echothrust/pf-diverters
- gizzlon 12y agoCool, I run a pf firewall but this was news to me. Anyone have any idea of the performance overhead? (Not that it really matters for me, just curious)
- mct 12y agoThere is a similar feature in Linux which I've used a number of times over the years to simulate various network problems, and to modify packets flowing through my router in interesting ways. You can select packets to be sent to userspace with the "-j QUEUE" iptables target handler, and then read those packets using libnetfilter.