From owner-freebsd-ipfw@FreeBSD.ORG  Thu May 21 16:21:41 2009
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3E2A110656C8
	for <freebsd-ipfw@freebsd.org>; Thu, 21 May 2009 16:21:41 +0000 (UTC)
	(envelope-from fjwcash@gmail.com)
Received: from mail-gx0-f166.google.com (mail-gx0-f166.google.com
	[209.85.217.166])
	by mx1.freebsd.org (Postfix) with ESMTP id EA6548FC15
	for <freebsd-ipfw@freebsd.org>; Thu, 21 May 2009 16:21:40 +0000 (UTC)
	(envelope-from fjwcash@gmail.com)
Received: by gxk10 with SMTP id 10so2375933gxk.19
	for <freebsd-ipfw@freebsd.org>; Thu, 21 May 2009 09:21:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:in-reply-to:references
	:date:message-id:subject:from:to:content-type
	:content-transfer-encoding;
	bh=+99L0f+QXHY+QLyMnG9ql7u008fDp3NLB84HQcH91a8=;
	b=n3tgVIHPeefXThGBFXtzLHgRf+QAeq/Npe0T61N2Sj/0e7Ej06TMJBSxl8AdS2B18n
	9t9EmNonLZeVQtMU+zAOecTFzyLgfMT5vUxWPlQGgWn+EVn3tGV5kLtMjYElBOaXuY8I
	GQum+/MV7lTi+HD2Qln5a42G5YcRmkTBLYASo=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:content-type:content-transfer-encoding;
	b=p1lQN1zZM5IZvSgMUJAeIEEWuG4T0d29ZaiEX/IK4JDFPwNqBO80ZoaZMwpkhJZDRS
	6IsKdl54G0fPS4CfpBXqrIQCLuV+s2MjsJyfA87N1+4G5jFrXbPN37f6CeDiHz+mEAEQ
	jnGAnJcc4AvmDjGgAwOVZgz1Vp0/bazDu3H70=
MIME-Version: 1.0
Received: by 10.150.215.20 with SMTP id n20mr5353788ybg.326.1242920970563; 
	Thu, 21 May 2009 08:49:30 -0700 (PDT)
In-Reply-To: <20090521150113.GA47160@onelab2.iet.unipi.it>
References: <9a542da30905210720y50fafe59ld3459c9e76ef5824@mail.gmail.com>
	<20090521150113.GA47160@onelab2.iet.unipi.it>
Date: Thu, 21 May 2009 08:49:30 -0700
Message-ID: <b269bc570905210849s202084d2h15e991683d1b112b@mail.gmail.com>
From: Freddie Cash <fjwcash@gmail.com>
To: freebsd-ipfw@freebsd.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: Does ipfw support interface groups?
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 May 2009 16:21:41 -0000

On Thu, May 21, 2009 at 8:01 AM, Luigi Rizzo <rizzo@iet.unipi.it> wrote:
> On Thu, May 21, 2009 at 04:20:48PM +0200, Ermal Lu?i wrote:
>> can ipfw use somehow interface groups as pf(4) can?
>> From a quick glance at documentation and not so through look at code
>> it does not but i am sending this just if i missed something during my
>> search!
>
> something like
> =C2=A0 =C2=A0 =C2=A0 =C2=A0... { recv ed0 or recv xl1 or recv ath4 or rec=
v vlan0 } ...
> is perhaps not so nice but does the job.

Seriously??!!

Luigi, you just made my day.  :)  Writing duplicate sets of rules for
multi-homed firewalls where the only thing that's different is the
incoming interface has been a pain ...

Thanks for the info!!
--=20
Freddie Cash
fjwcash@gmail.com