Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 May 1998 00:31:53 -0700 (PDT)
From:      Julian Elischer <julian@whistle.com>
To:        Eivind Eklund <eivind@yes.no>
Cc:        Luigi Rizzo <luigi@labinfo.iet.unipi.it>, kjc@csl.sony.co.jp, net@FreeBSD.ORG
Subject:   Re: struct ifnet handling...
Message-ID:  <Pine.BSF.3.95.980520002407.21215A-100000@current1.whistle.com>
In-Reply-To: <19980520001008.55413@follo.net>

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, 20 May 1998, Eivind Eklund wrote:

> I'm not certain what you mean by 'pre-defined chains'.  I pointed out
> where there were logical splits, based on an automated transform of
> rules.  These differences _are_ there, no matter what - there are
> those 6 classes of rules (at least).
> 
> BTW: The concept of 'chains' are used on the Ciscos (there called
> 'rule lists' IIRC).

what's so difficult about:

100 [common rules always done]

1000 skipto 4000 in recv ed0
1100 skipto 4500 out xmit ed0
1200 skipto 5000 in recv de0
1300 skipto 5500 out xmit de0
1400 skipto 6000 via lo0

4000 [ed0 incoming chain]
4490 skipto [common reject code]
4500 [ed0 outgoing chain]
4990 skipto [common reject code]
5000 [de0 incoming chain]
5490 skipto [common reject code]
5500 [de0 outgoing chain]
5990 skipto [common reject code]
6000 [lo0 rules]
6990 skipto [common reject code]


(?)

julian



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.980520002407.21215A-100000>