From owner-freebsd-net@FreeBSD.ORG Tue Sep 9 10:45:55 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DD67916A4BF for ; Tue, 9 Sep 2003 10:45:55 -0700 (PDT) Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35]) by mx1.FreeBSD.org (Postfix) with ESMTP id 27FCC44005 for ; Tue, 9 Sep 2003 10:45:55 -0700 (PDT) (envelope-from julian@elischer.org) Received: from interjet.elischer.org ([12.233.125.100]) by attbi.com (rwcrmhc11) with ESMTP id <20030909174554013009d1b5e>; Tue, 9 Sep 2003 17:45:54 +0000 Received: from localhost (localhost.elischer.org [127.0.0.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id KAA46473; Tue, 9 Sep 2003 10:45:54 -0700 (PDT) Date: Tue, 9 Sep 2003 10:45:52 -0700 (PDT) From: Julian Elischer To: Josh Brooks In-Reply-To: <20030909065259.A77579-100000@mail.econolodgetulsa.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: Luigi Rizzo cc: freebsd-net@freebsd.org Subject: Re: how do I delete just one ipfw rule ? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Sep 2003 17:45:56 -0000 On Tue, 9 Sep 2003, Josh Brooks wrote: > > > > On Tue, 9 Sep 2003, Luigi Rizzo wrote: > > > no, it is not possible to delete them -- you have no way to tell > > which rule to delete when multiple rules share the same number. > > Are there any plans to make ipfw more flexible by changing the 65535 to > the next power of two ? So there are a lot more rules ? The rule number is only 16 bits long.. This is made use of in 'divert' where the rule number that caused the divert is in the port-number field when you do a recvfrom(). if you change this, it won't work.. On "sendto()" teh rule number is used to suggest where the packet "re-enters" the filter. if you pass it back unchanged then it reenters the filter at the next rule after the one that diverted it.. (i.e. where it left off) > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >