From owner-freebsd-net@FreeBSD.ORG Thu Nov 11 19:15:39 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C990F16A4D2 for ; Thu, 11 Nov 2004 19:15:39 +0000 (GMT) Received: from mta3.srv.hcvlny.cv.net (mta3.srv.hcvlny.cv.net [167.206.5.69]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3644943D45 for ; Thu, 11 Nov 2004 19:15:32 +0000 (GMT) (envelope-from anthonyv@brainlink.com) Received: from superior.local.non-standard.net (ool-18b9c193.dyn.optonline.net [24.185.193.147]) by mta3.srv.hcvlny.cv.net (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0I7100BJI449IJ@mta3.srv.hcvlny.cv.net> for freebsd-net@freebsd.org; Thu, 11 Nov 2004 14:14:33 -0500 (EST) Date: Thu, 11 Nov 2004 14:14:41 -0500 (EST) From: Anthony Volodkin In-reply-to: <001f01c4c7c6$7d4eba20$b2cef0d5@misho> X-X-Sender: anthonyv@superior.local.non-standard.net To: Mihail Balikov Message-id: <20041111141243.N82349@superior.local.non-standard.net> MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=US-ASCII Content-transfer-encoding: 7BIT References: <20041111025930.U82349@superior.local.non-standard.net> <001f01c4c7c6$7d4eba20$b2cef0d5@misho> cc: freebsd-net@freebsd.org Subject: Re: IPFW2 matching a list/set of interfaces X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2004 19:15:40 -0000 That seems to work, thanks a lot! -Anthony Volodkin On Thu, 11 Nov 2004, Mihail Balikov wrote: ipfw add allow ip from any to 192.168.100.100 { via fxp0 or via ng0 or via xl0 } > > > ----- Original Message ----- > From: "Anthony Volodkin" > To: > Sent: Thursday, November 11, 2004 10:05 AM > Subject: IPFW2 matching a list/set of interfaces > > > > Hi, > > > > I've been trying to implement some ipfw rules that would match several > > interfaces using the recv/via/xmit keywords, however that seems to be > > unsupported. So a rule like: > > > > ipfw add allow ip from any to 192.168.100.100 via {fxp0,ng0,xl0} > > > > fails with an invalid ) error. Alternatively if I use an or block, i > > get an error about an invalid or block. > > > > Does anyone know whether this is actually possible/supported/supported > > in the near future? Sure I could make a rule for each interface, but in > my situation that would not scale well. > > > > Thanks, > > > > Anthony Volodkin > > _______________________________________________ > > freebsd-net@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-net > > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > > > >