From owner-freebsd-ipfw@FreeBSD.ORG Mon Mar 24 00:25:00 2014 Return-Path: Delivered-To: ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8E94EB57 for ; Mon, 24 Mar 2014 00:25:00 +0000 (UTC) Received: from mail-lb0-x22b.google.com (mail-lb0-x22b.google.com [IPv6:2a00:1450:4010:c04::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 128968BB for ; Mon, 24 Mar 2014 00:24:59 +0000 (UTC) Received: by mail-lb0-f171.google.com with SMTP id w7so3136225lbi.16 for ; Sun, 23 Mar 2014 17:24:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=G0WwpoLX5uHi3EUvnRjs6M7+slSh/lfmoLb7R2gXm9c=; b=ytCtwblBE/ZoTSWFH/gZplN1l2kT6RSMB3rT4z9KptvwXRmsOTWvkox+S5UMRFVJby J08hvHwtNUwyl0DgI9eAFr8aieecyJcKzXTyssEFkKAFy/wRUP5Ypgm+2mqt6CmDvY4P xb5FQYFp7gemF9+tS6JDkt0Sby9tInICnO3mbQcscK9jhycsL5uAwEDNq88nYcIG0RO9 Sc4sCdM6gKmb+jcHNTvjPJ113gSWvPhdbnTj6F9fXhNHNw6v+ypqAjY9F+SzR2BPg/U5 UmGwT+e4/pUaAlKv0IYm0/dLZjT5hYO+wbGqvyz22IqQyQsUW/KcQS/c6qvPmKxBDXhZ AsTQ== MIME-Version: 1.0 X-Received: by 10.112.163.69 with SMTP id yg5mr21729411lbb.14.1395620697809; Sun, 23 Mar 2014 17:24:57 -0700 (PDT) Sender: rizzo.unipi@gmail.com Received: by 10.114.200.107 with HTTP; Sun, 23 Mar 2014 17:24:57 -0700 (PDT) In-Reply-To: References: <51546.1395432085@server1.tristatelogic.com> <20140322182402.Q83569@sola.nimnet.asn.au> <201403221454.IAA22021@mail.lariat.net> <20140322151155.184d5229@gumby.homeunix.com> <532E723C.2090109@freebsd.org> <532E7398.5090607@freebsd.org> <20140324000439.F87212@sola.nimnet.asn.au> <532EF401.80506@freebsd.org> <532F6EBF.9000802@freebsd.org> Date: Mon, 24 Mar 2014 01:24:57 +0100 X-Google-Sender-Auth: jaUFiIsBqDzet-61xmtOLgN95r0 Message-ID: Subject: Re: ipfw dynamic rules From: Luigi Rizzo To: Michael Sierchio Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-ipfw@freebsd.org" X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Mar 2014 00:25:00 -0000 On Mon, Mar 24, 2014 at 1:14 AM, Michael Sierchio wrote: > On Sun, Mar 23, 2014 at 4:31 PM, Julian Elischer > wrote: > > > but disabled rules still have a cost I believe as hey still need to be > > traversed, > > unless someone has been very smart.. > > This I did not know. I don't have many, but it's a small > disappointment, if true. > skipto is at most log(n) in the number of rules. cheers luigi