Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Feb 2009 16:42:22 -0800
From:      "Kevin Oberman" <>
To:        Raffaele De Lorenzo <>
Subject:   Re: Support for IPv6 tables in ipfw? 
Message-ID:  <>
In-Reply-To: Your message of "Wed, 11 Feb 2009 23:50:34 +0100." <> 

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
> From: Raffaele De Lorenzo <>
> Date: Wed, 11 Feb 2009 23:50:34 +0100
> Hi,
> I developed with Luigi (as mentor) and Mariano Tortoriello the first  
> release of ipfw with ipv6 extension. If you and the FreeBSD Community  
> think that the tables functional  is a good feature i can develop it  
> for IPv6 protocol.

Tables are invaluable for several functions. The most important to me is
the ability to create a 'block' list that can be easily updated from a
program or script. With a table you just need:
add 00500 unreach port ip from table 86 to any
in your standard configuration and then a script can do:
table 22 add 2001:400:14:23::45
to add a system to the list. To do it without tables means finding an
available rule and inserting the rule in the main table.

I can do it without tables, but it works much better with them.
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail:			Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751

Want to link to this message? Use this URL: <>