From owner-freebsd-questions@FreeBSD.ORG Wed Dec 12 07:18:15 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0DE3A16A417 for ; Wed, 12 Dec 2007 07:18:15 +0000 (UTC) (envelope-from nvass@teledomenet.gr) Received: from smtp.teledomenet.gr (smtp.teledomenet.gr [213.142.128.2]) by mx1.freebsd.org (Postfix) with ESMTP id B49B113C447 for ; Wed, 12 Dec 2007 07:18:14 +0000 (UTC) (envelope-from nvass@teledomenet.gr) Received: by smtp.teledomenet.gr (Postfix, from userid 58) id E7BE314226F; Wed, 12 Dec 2007 09:18:13 +0200 (EET) X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on smtp.teledomenet.gr X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.2.3 Received: from iris (unknown [192.168.1.71]) by smtp.teledomenet.gr (Postfix) with ESMTP id E15EB142246; Wed, 12 Dec 2007 09:18:08 +0200 (EET) From: Nikos Vassiliadis To: freebsd-questions@freebsd.org Date: Wed, 12 Dec 2007 09:20:45 +0200 User-Agent: KMail/1.9.7 References: <475E0190.7030909@pacific.net.sg> <475EC215.8060004@dial.pipex.com> <475F4209.8080507@pacific.net.sg> In-Reply-To: <475F4209.8080507@pacific.net.sg> X-NCC-RegID: gr.telehouse MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200712120920.46626.nvass@teledomenet.gr> Cc: Erich Dollansky , Alex Zbyslaw Subject: Re: performance impact of large /etc/hosts files X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2007 07:18:15 -0000 On Wednesday 12 December 2007 04:06:01 Erich Dollansky wrote: > > There's no clean solutions to getting different lookups per-user that > > I > > The clen solution is hosts. But hosts is operating system-wide. Both ipfw and pf support tables, which is what you want, large sets or unrelated (addresses|networks). Both of them support UID matching as a target (caution: this feature is not mpsafe on FreeBSD-6). Out of curiosity, how big your hosts file is? Can you share it with the rest of us? Perhaps upload it somewhere, so we can try your approach? Nikos