Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 8 Jan 2000 10:29:25 +0100 (CET)
From:      Luigi Rizzo <luigi@info.iet.unipi.it>
To:        Poul-Henning Kamp <phk@critter.freebsd.dk>
Cc:        "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>, Patrick Bihan-Faou <patrick@mindstep.com>, Harold Gutch <logix@foobar.franken.de>, freebsd-current@FreeBSD.ORG, Nate Williams <nate@mt.sri.com>
Subject:   Re: ipfw optimizations
Message-ID:  <200001080929.KAA09763@info.iet.unipi.it>
In-Reply-To: <13115.947320959@critter.freebsd.dk> from Poul-Henning Kamp at "Jan 8, 2000 09:42:39 am"

next in thread | previous in thread | raw e-mail | index | archive | help
> I think the general syntax would be if you could say "for one of my
> own IP#"  that would be very powerful:
> 
> 	add allow tcp from any to me 22
> 	add deny tcp from any to not me 22

the 'me' thing is relatively simple to implement, it suffices to scan
the list of IP associated with all interfaces. Can be time-consuming.

	cheers
	luigi
-----------------------------------+-------------------------------------
  Luigi RIZZO, luigi@iet.unipi.it  . Dip. di Ing. dell'Informazione
  http://www.iet.unipi.it/~luigi/  . Universita` di Pisa
  TEL/FAX: +39-050-568.533/522     . via Diotisalvi 2, 56126 PISA (Italy)
  Mobile   +39-347-0373137
-----------------------------------+-------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001080929.KAA09763>