PF state inspection, second try

2010-06-20 Thread Vadim Jukov
Hello tech@ and PF hackers especially, again. Here is my second, more advanced try on implementing packet inspection in PF. This time it can inspect and drop established connection. I used one of the "pad" bytes in pf_state structure for this; hope this is harmless. Also, there are many fixes men

Re: WIP: packet inspection in PF

2010-06-13 Thread Vadim Jukov
13 June 2010 P3. 19:14:39 Vadim Zhukov wrote: > Thank you, I got the point. Yes, my patch is intended for some simple > case only, when writing a program for filtering is a little bit > overkill. I understand that there is no silver bullet, and, of course, > separate proxy app is needed in complex

WIP: packet inspection in PF

2010-06-12 Thread Vadim Jukov
Hello, tech@, especially PF hackers! This is a work-in-progress patch that implements direct packet inspection in PF. This is needed in the cases when traffic could not be easily detected by other mechanisms. The actual example is new UDP-based protocol of uTorrent program that spams networks h

Why do thread locking for arc4random*()?

2010-05-06 Thread Vadim Jukov
Hello, tech@'s. Possibly this question is stupid, but I cannot understand - why do thread locking for arc4random*() functions instead of just maintaining their data per-thread? Thanks in advance.