From owner-cvs-src@FreeBSD.ORG  Thu Jun 10 07:12:29 2004
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 680)
	id 75DE616A4D0; Thu, 10 Jun 2004 07:12:29 +0000 (GMT)
Date: Thu, 10 Jun 2004 07:12:29 +0000
From: Darren Reed <darrenr@hub.freebsd.org>
To: Ruslan Ermilov <ru@FreeBSD.org>
Message-ID: <20040610071229.GC47549@hub.freebsd.org>
References: <200406092010.i59KAcXH025699@repoman.freebsd.org>
	<200406100445.44763.max@love2party.net>
	<20040610032701.GA47549@hub.freebsd.org> <20040610065335.GB13728@ip.net.ua>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20040610065335.GB13728@ip.net.ua>
User-Agent: Mutt/1.4.1i
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet in.h
	ip_fw.h ip_fw2.c raw_ip.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jun 2004 07:12:29 -0000

On Thu, Jun 10, 2004 at 09:53:35AM +0300, Ruslan Ermilov wrote:
> On Thu, Jun 10, 2004 at 03:27:01AM +0000, Darren Reed wrote:
> > On Thu, Jun 10, 2004 at 04:45:37AM +0200, Max Laier wrote:
> > > On Wednesday 09 June 2004 22:10, Ruslan Ermilov wrote:
> > > > ru          2004-06-09 20:10:38 UTC
> > > >
> > > >   FreeBSD src repository
> > > >
> > > >   Modified files:
> > > >     sbin/ipfw            ipfw.8 ipfw2.c
> > > >     sys/netinet          in.h ip_fw.h ip_fw2.c raw_ip.c
> > > >   Log:
> > > >   Introduce a new feature to IPFW2: lookup tables.  These are useful
> > > >   for handling large sparse address sets.  Initial implementation by
> > > >   Vsevolod Lobko <seva@ip.net.ua>, refined by me.
> > > 
> > > Idea from: pf ;)
> > > Nice!
> > 
> > Both ipfilter & iptables supported this kind of address matching before
> > pf did.
> > 
> How is it possible with IPFilter, can you enlighten me?

In IPFilter4, there's a program called ippool that manages "it" and
subsequent support within the rest of the code.

http://coombs.anu.edu.au/~avalon/ip-filter.html

Darren