Date: Sat, 13 May 2006 17:08:03 +0700 From: "Vadim Goncharov" <vadimnuclight@tpu.ru> To: "Julian Elischer" <julian@elischer.org> Cc: freebsd-net@freebsd.org, freebsd-ipfw@freebsd.org Subject: Re: [patch] ipfw packet tagging Message-ID: <ops9hifptx4fjv08@nuclight.avtf.net> In-Reply-To: <4465A8F8.2020601@elischer.org> References: <ops9fwnzbw17d6mn@nuclight.avtf.net> <44648E66.6010800@freebsdbrasil.com.br> <20060512065327.B16302@xorpc.icir.org> <ops9f3lwis4fjv08@nuclight.avtf.net> <20060512085631.A19484@xorpc.icir.org> <ops9hgqpmr4fjv08@nuclight.avtf.net> <4465A8F8.2020601@elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
13.05.06 @ 16:38 Julian Elischer wrote: >>>> A question about features: is it worth adding functionality of >>>> matching >>>> range of tags? For example: >>>> >>>> ipfw add pass ip from any to any tagged 1-5,10,20 >>> >>> >>> i think it is a useful feature, and if you reuse the existing code >>> for matching port ranges etc to implement it, performance should >>> be reasonably good. >> >> >> OK, Andrey made new version of patches available: >> http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ >> >> Manpage patch is integrated as well as new untag/tagged range >> functionality, >> based on existing port ranges matching code. Short test shown that it >> works. > > > I might suggest that the new 'tablearg' keyword be useable in a tag > command allowing a table to contain entries that give different tags. > (I don't think it is in 5 but it may be in 6.. (not sure)) > > would be cool however. May be, but I can't imagine a real situation where it can be useful, as tables already contain IP adresses. Can you give a real-life example where it helps ? -- WBR, Vadim Goncharov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ops9hifptx4fjv08>