Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Dec 2001 17:18:51 -0500 (EST)
From:      Darren Henderson <darren@nighttide.net>
To:        freebsd-ipfw@freebsd.org
Subject:   silly question...
Message-ID:  <Pine.BSF.4.40.0112231713280.686-100000@localhost>

next in thread | raw e-mail | index | archive | help


Any processing efficiences in gathering up ports in a single rule as
opposed to one rule per each port?

In other words is something like this....

ipfw add allow tcp from any to hostname 22,25,53,80,443 setup

better then

ipfw add allow tcp from any to hostname 443 setup
ipfw add allow tcp from any to hostname 80 setup
ipfw add allow tcp from any to hostname 53 setup
ipfw add allow tcp from any to hostname 25 setup
ipfw add allow tcp from any to hostname 22 setup

... in terms of "speed". Obviously it makes the config file somewhat
messier...

______________________________________________________________________
Darren Henderson                                  darren@nighttide.net

                   Help fight junk e-mail, visit http://www.cauce.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.40.0112231713280.686-100000>