From owner-freebsd-net Mon Jun 17 9:57:45 2002 Delivered-To: freebsd-net@freebsd.org Received: from iguana.icir.org (iguana.icir.org [192.150.187.36]) by hub.freebsd.org (Postfix) with ESMTP id E8A1737B40C; Mon, 17 Jun 2002 09:57:02 -0700 (PDT) Received: (from rizzo@localhost) by iguana.icir.org (8.11.6/8.11.3) id g5HGv2X36243; Mon, 17 Jun 2002 09:57:02 -0700 (PDT) (envelope-from rizzo) Date: Mon, 17 Jun 2002 09:57:02 -0700 From: "'Luigi Rizzo'" To: ipfw@FreeBSD.ORG Subject: third ipfw snapshot available Message-ID: <20020617095702.C36073@iguana.icir.org> References: <20020613171319.D93980@iguana.icir.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <20020613171319.D93980@iguana.icir.org>; from rizzo@icir.org on Thu, Jun 13, 2002 at 05:13:19PM -0700 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org [Bcc to -net] A third snapshot of my rewrite of the ipfw code is available at http://info.iet.unipi.it/~luigi/ipfw5.20020617.tgz This code is for -current, and it implements all the existing ipfw features with the exception of ipprecedence, iptos and icmptypes (these will be added in the next snapshot). It also lets you put "not" and "or" connectives in front of almost any field of an ipfw rule, so you can likely write more compact and efficient rulesets. Being the work almost complete, I should be able to run performance tests and produce a -stable version of this code shortly. I would be grateful if you could give this code a try and tell me how it works for you on the rulesets you use (it is supposed to be 100% compatible with the existing ipfw). You need to have a version of -current after May 15th, replace sys/netinet/ip_fw.c sys/netinet/ip_fw.h sys/netinet/ip_dummynet.c sbin/ipfw/ipfw.c with the files in the archive, rebuild a kernel and /sbin/ipfw. Both success and failure reports are welcome. cheers luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message