Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 May 2013 13:16:00 -0700
From:      Michael Sierchio <kudzu@tenebras.com>
To:        Korodev <korodev@gmail.com>
Cc:        "freebsd-ipfw@freebsd.org" <freebsd-ipfw@freebsd.org>
Subject:   Re: IPFW Table Size
Message-ID:  <CAHu1Y72n6Wuz0Z6ivPuONPGpTfvMaNxFJG98N0aiASjO=U8tEw@mail.gmail.com>
In-Reply-To: <CAKOsuLr-AayiTOYoiyx5sSH_bbwkMoDpFsbWM9jPeyk-QLvkog@mail.gmail.com>
References:  <CAKOsuLqQep1ZuFXp%2BpGrGzO_PiAa_ZM9zkrcY%2BwtnpSmkVeMqA@mail.gmail.com> <CAHu1Y717ec7=x3g1Gdv4q4qfyx0141msFVQVDSPoE-2ehC-hng@mail.gmail.com> <CAKOsuLr-AayiTOYoiyx5sSH_bbwkMoDpFsbWM9jPeyk-QLvkog@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Oh, it's not a bad idea to have different tables for different purposes - a
whitelist and a blacklist, for example.  The syntax I'd use in your example
is

ipfw add 05000 deny log ip from table\(2\) to any

and probably

ipfw add 05000 deny log ip from table\(2\) to any in recv $interface



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHu1Y72n6Wuz0Z6ivPuONPGpTfvMaNxFJG98N0aiASjO=U8tEw>