From owner-freebsd-ipfw Mon Jun 10 2:47:36 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from iguana.icir.org (iguana.icir.org [192.150.187.36]) by hub.freebsd.org (Postfix) with ESMTP id C65CC37B408; Mon, 10 Jun 2002 02:47:30 -0700 (PDT) Received: (from rizzo@localhost) by iguana.icir.org (8.11.6/8.11.3) id g5A9lQ455217; Mon, 10 Jun 2002 02:47:26 -0700 (PDT) (envelope-from rizzo) Date: Mon, 10 Jun 2002 02:47:26 -0700 From: Luigi Rizzo To: "Vladimir B. Grebenschikov" Cc: ipfw@freebsd.org, "current@freebsd.org" Subject: Re: New ipfw code available Message-ID: <20020610024726.A54631@iguana.icir.org> References: <20020608201909.A41807@iguana.icir.org> <1023698860.576.29.camel@vbook.express.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <1023698860.576.29.camel@vbook.express.ru>; from vova@sw.ru on Mon, Jun 10, 2002 at 12:47:40PM +0400 Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jun 10, 2002 at 12:47:40PM +0400, Vladimir B. Grebenschikov wrote: ... > And what about radix-tree-based ip-list matching ? yes, it is planned. cheers luigi > > ipfw add 1 allow ip from {1.2.3.0/24,1.3.5.0/24,17.2.3.4/45,11.2.3.4/30} > or > cat mylist | ipfw list add mylist - > ipfw add 1 allow ip from @mylist > > or something like > > If you deal with large access-lists ipfw becomes not best tool due to > linear comparison. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message