From owner-freebsd-security@FreeBSD.ORG  Mon Jan 21 12:14:33 2008
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 11D1B16A417
	for <freebsd-security@freebsd.org>;
	Mon, 21 Jan 2008 12:14:33 +0000 (UTC) (envelope-from dan@obluda.cz)
Received: from smtp1.kolej.mff.cuni.cz (smtp1.kolej.mff.cuni.cz
	[78.128.192.10])
	by mx1.freebsd.org (Postfix) with ESMTP id 8B18513C457
	for <freebsd-security@freebsd.org>;
	Mon, 21 Jan 2008 12:14:32 +0000 (UTC) (envelope-from dan@obluda.cz)
X-Envelope-From: dan@obluda.cz
Received: from kgw.obluda.cz (openvpn.ms.mff.cuni.cz [195.113.20.87])
	by smtp1.kolej.mff.cuni.cz (8.13.8/8.13.8) with ESMTP id m0LCEH3n012718
	for <freebsd-security@freebsd.org>;
	Mon, 21 Jan 2008 13:14:18 +0100 (CET) (envelope-from dan@obluda.cz)
Message-ID: <47948C99.8060504@obluda.cz>
Date: Mon, 21 Jan 2008 13:14:17 +0100
From: Dan Lukes <dan@obluda.cz>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.8.1.11) Gecko/20071204 SeaMonkey/1.1.7
MIME-Version: 1.0
To: freebsd security <freebsd-security@freebsd.org>
References: <Pine.BSF.3.96.1080121224407.8768B-100000@gaia.nimnet.asn.au>
In-Reply-To: <Pine.BSF.3.96.1080121224407.8768B-100000@gaia.nimnet.asn.au>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: denyhosts-like app for MySQLd?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jan 2008 12:14:33 -0000

Ian Smith napsal/wrote, On 01/21/08 12:55:
> No problem; IPFW has tables too, and sets, with which you could
> enable/disable or 

	It interests me:

> swap your script-constructed tables atomically.

I know how to create new set of rules then move it using "ipfw set move" 
atomically but I don't know how to fill new table then move it in it's 
place atomically.

	So, how to swap tables in one step ?

	Thank you

				Dan