Date: Sat, 31 Aug 2002 15:05:38 -0700 From: Luigi Rizzo <luigi@FreeBSD.ORG> To: "Jeffrey J. Mountin" <jeff-ml@mountin.net> Cc: Kenneth W Cochran <kwc@TheWorld.com>, freebsd-stable@FreeBSD.ORG Subject: Re: IPFW2 option in -stable kernel config Message-ID: <20020831150538.A69952@iguana.icir.org> In-Reply-To: <4.3.2.20020831112817.00e57e30@207.227.119.2>; from jeff-ml@mountin.net on Sat, Aug 31, 2002 at 12:15:33PM -0500 References: <200208311312.JAA118809063@shell.TheWorld.com> <4.3.2.20020831112817.00e57e30@207.227.119.2>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Aug 31, 2002 at 12:15:33PM -0500, Jeffrey J. Mountin wrote:
...
> The only thing I'm curious about is just how far the range functionality
> goes. Would be nice to extend the following example given:
>
> ... ip from 1.2.3.0/24{50,6,27,158} to ...
ranges are limited to /24 or larger masks (partly to simplify parsing,
partly because the bitmap grows exponentially with smaller masks).
In fact, the subnet part is totally redundant (it suffices to lookup
the list of numbers between brackets), but again its presence gives you
a bit more error checking and eases parsing.
I have been thinking about the use of ranges within the bitmap,
e.g. 1.2.36.0/24{10-19,55,60-89,30}, this will be probably be
added in a future release.
cheers
luigi
> To say:
>
> ... ip from 1.2.36.0/22{36.1,37.2,38.3,39.4} to ...
>
> And if ranges could be used such as 36.1-10 with such a rule.
>
> ... ip from 1.2.36.0/22{36.10-19,37.20-29,38.30-39,39.40-49} to ...
>
> Might be wishful thinking.
> Have CC'd Luigi to find out.
>
> cheers!
>
>
> Jeff Mountin - jeff@mountin.net
> Systems/Network Administrator
> FreeBSD - the power to serve
>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020831150538.A69952>