From owner-freebsd-ipfw Tue Sep 10 11:55:18 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E970237B400 for ; Tue, 10 Sep 2002 11:55:15 -0700 (PDT) Received: from mail.tcoip.com.br (erato.tco.net.br [200.220.254.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id E9C9F43E6E for ; Tue, 10 Sep 2002 11:55:07 -0700 (PDT) (envelope-from dcs@tcoip.com.br) Received: from tcoip.com.br ([10.0.2.6]) by mail.tcoip.com.br (8.11.6/8.11.6) with ESMTP id g8AIsMv03097; Tue, 10 Sep 2002 15:54:24 -0300 Message-ID: <3D7E3FDE.6070805@tcoip.com.br> Date: Tue, 10 Sep 2002 15:54:22 -0300 From: "Daniel C. Sobral" User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20020905 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Luigi Rizzo Cc: ipfw@FreeBSD.ORG Subject: Re: ipfw2 vs. ipfw1 and 4.7 References: <20020902082743.D87097@iguana.icir.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Luigi Rizzo wrote: > People, > now that the release of 4.7 is approaching, i would really appreciate > if you could give ipfw2 a try and see whether it breaks anything > in your rulesets. Also have a look at the manpage highlighting the > differences between ipfw1 and ipfw2 to see if your rulesets can be > simplified/made more efficient. I love ipfw2, even though the breakage of fwd caused me a huge headache. Just the set feature would be enough to endear me to it. Now I have a reasonably resilient system for firewall rule changes, at last. And just being able to type sh /etc/rc.firewall... :-) As a side note, the man page mentions that 32 sets are available, but set 31 is illegal when I try to use it (and sometimes produce very weird results indeed). -- Daniel C. Sobral (8-DCS) Gerencia de Operacoes Divisao de Comunicacao de Dados Coordenacao de Seguranca TCO Fones: 55-61-313-7654/Cel: 55-61-9618-0904 E-mail: Daniel.Capo@tco.net.br Daniel.Sobral@tcoip.com.br dcs@tcoip.com.br Outros: dcs@newsguy.com dcs@freebsd.org capo@notorious.bsdconspiracy.net Never, ever lie to someone you love unless you're absolutely sure they'll never find out the truth. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message