Re: DSA concerns for jessie architectures
Samuel Thibault, le Sun 30 Jun 2013 11:38:33 +0200, a écrit :
> > lack of firewall support.
> Now that we use a userland driver for networking, it should be easy to
> interpose at least a simple BPF filter, I have added the task here:
> debian-hurd, bug-hurd: anybody up for this? The "eth0" interface is
> quite simple, plugging BPF into it should be easy.
This was actually already done by Zheng Da some years ago in the
incubator, named under eth-filter. It uses libpcap to parse input and
output rules into BPF filters. I have improved it and imported it into
the hurd package.