In Linux 3.9 there's a packet filter module called xt_bpf that can take compiled BPF bytecode and use it directly in an iptables rule.

Is there any equivalent for FreeBSD's ipfw system?


You can try netgraph node ng_bpf.

  • thanks - looks useful. Do you happen to have any pointers on how to integrate netgraph with ipfw? – Alnitak Jan 5 '16 at 12:03
  • You need to use ng_ipfw. Alas i have no exapmles right now. – user1700494 Jan 5 '16 at 13:23
  • thanks anyway - unfortunately the documentation for ng_ipfw appears to be very poor :( – Alnitak Jan 5 '16 at 13:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.