From owner-freebsd-net Thu Apr 4 12:26:12 2002 Delivered-To: freebsd-net@freebsd.org Received: from proton.hexanet.fr (proton.hexanet.fr [81.23.32.33]) by hub.freebsd.org (Postfix) with ESMTP id 5D43537B416 for ; Thu, 4 Apr 2002 12:26:02 -0800 (PST) Received: from hexanet.fr (localhost [127.0.0.1]) by proton.hexanet.fr (8.11.6/8.11.6) with SMTP id g34KPu003795; Thu, 4 Apr 2002 22:25:57 +0200 (CEST) (envelope-from c.prevotaux@hexanet.fr) Date: Thu, 4 Apr 2002 22:25:56 +0200 From: Christophe Prevotaux To: Luigi Rizzo Cc: freebsd-net@FreeBSD.ORG Subject: Re: IPFW Max Rule Discrete Number Limit Message-Id: <20020404222556.5ddeb117.c.prevotaux@hexanet.fr> In-Reply-To: <20020403111545.A98202@iguana.icir.org> References: <20020403205923.27d35e11.c.prevotaux@hexanet.fr> <20020403111545.A98202@iguana.icir.org> Organization: HEXANET Sarl X-Mailer: Sylpheed version 0.7.0 (GTK+ 1.2.10; i386--freebsd4.4) X-NCC-RegID: fr.hexanet Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 3 Apr 2002 11:15:45 -0800 Luigi Rizzo wrote: > On Wed, Apr 03, 2002 at 08:59:23PM +0200, Christophe Prévotaux wrote: > > Hi > > > > I have reached the 655 firewalling rules limit (with discrete values) > > in ipfw and I was wondering why ipfw will not let the user select > > the incremental step value in rules numbering ? also it should be > > possible to renumber these rules on the fly > > (though, i agree this is not this useful) > > you know you can assign explicit numbers to rules ? yes I know , do you seriously think I will do this ? What happens when I insert new rules ? I have to write a script to renumber them ? can't this be included in the ipfw itself for example by specifying a incremental step number for exemple ipfw -q flush -i [step] ipfw -q flush -i 10 in this manner no big changes to the rc.firewall or firewall rules files would be needed and everyone would be happy. > There is alot of magic you can do in userland rather than > relying on the kernel to cope with all sorts of different > user requirements... > > cheers > luigi > -- =============================================================== Christophe Prevotaux Email: c.prevotaux@hexanet.fr HEXANET SARL URL: http://www.hexanet.fr/ Z.A.C Les Charmilles Tel: +33 (0)3 26 79 30 05 3 Allée Thierry Sabine Direct: +33 (0)3 26 79 08 02 BP202 Fax: +33 (0)3 26 79 30 06 51686 Reims Cedex 2 FRANCE HEXANET Network Operation Center =============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message