Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Jun 2004 07:12:29 +0000
From:      Darren Reed <darrenr@hub.freebsd.org>
To:        Ruslan Ermilov <ru@FreeBSD.org>
Cc:        cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet in.h ip_fw.h ip_fw2.c raw_ip.c
Message-ID:  <20040610071229.GC47549@hub.freebsd.org>
In-Reply-To: <20040610065335.GB13728@ip.net.ua>
References:  <200406092010.i59KAcXH025699@repoman.freebsd.org> <200406100445.44763.max@love2party.net> <20040610032701.GA47549@hub.freebsd.org> <20040610065335.GB13728@ip.net.ua>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 10, 2004 at 09:53:35AM +0300, Ruslan Ermilov wrote:
> On Thu, Jun 10, 2004 at 03:27:01AM +0000, Darren Reed wrote:
> > On Thu, Jun 10, 2004 at 04:45:37AM +0200, Max Laier wrote:
> > > On Wednesday 09 June 2004 22:10, Ruslan Ermilov wrote:
> > > > ru          2004-06-09 20:10:38 UTC
> > > >
> > > >   FreeBSD src repository
> > > >
> > > >   Modified files:
> > > >     sbin/ipfw            ipfw.8 ipfw2.c
> > > >     sys/netinet          in.h ip_fw.h ip_fw2.c raw_ip.c
> > > >   Log:
> > > >   Introduce a new feature to IPFW2: lookup tables.  These are useful
> > > >   for handling large sparse address sets.  Initial implementation by
> > > >   Vsevolod Lobko <seva@ip.net.ua>, refined by me.
> > > 
> > > Idea from: pf ;)
> > > Nice!
> > 
> > Both ipfilter & iptables supported this kind of address matching before
> > pf did.
> > 
> How is it possible with IPFilter, can you enlighten me?

In IPFilter4, there's a program called ippool that manages "it" and
subsequent support within the rest of the code.

http://coombs.anu.edu.au/~avalon/ip-filter.html

Darren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040610071229.GC47549>