Date: 13 Feb 2001 16:23:15 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Poul-Henning Kamp <phk@critter.freebsd.dk> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/netinet ip_fw.c ip_fw.h src/sbin/ipfw ipfw.8 ipfw.c Message-ID: <xzplmrawqsc.fsf@flood.ping.uio.no> In-Reply-To: Poul-Henning Kamp's message of "Tue, 13 Feb 2001 15:14:36 %2B0100" References: <51205.982073676@critter>
next in thread | previous in thread | raw e-mail | index | archive | help
Poul-Henning Kamp <phk@critter.freebsd.dk> writes: > It would be more elegant to have multiple lists of ipfw rules: > One input list per interface > One output list per interface > One list for packets being forwarded > One list for packets arriving locally > One list for packets originating locally One list to rule them all One list to find them One list to bring them all And in the firewall bind them In the land of TCP/IP where the packets fly. DES (sorry, couldn't resist) -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzplmrawqsc.fsf>