From owner-freebsd-security  Sun Sep 27 12:45:50 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA03690
          for freebsd-security-outgoing; Sun, 27 Sep 1998 12:45:50 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id MAA03650
          for <freebsd-security@FreeBSD.ORG>; Sun, 27 Sep 1998 12:45:34 -0700 (PDT)
          (envelope-from sthaug@nethelp.no)
From: sthaug@nethelp.no
Received: (qmail 12756 invoked by uid 1001); 27 Sep 1998 19:45:20 +0000 (GMT)
To: wollman@khavrinen.lcs.mit.edu
Cc: eivind@yes.no, phk@critter.freebsd.dk, andrew@squiz.co.nz, hsu@clinet.fi,
        freebsd-security@FreeBSD.ORG
Subject: Re: ipfw
In-Reply-To: Your message of "Sun, 27 Sep 1998 14:56:14 -0400 (EDT)"
References: <199809271856.OAA04433@khavrinen.lcs.mit.edu>
X-Mailer: Mew version 1.05+ on Emacs 19.34.2
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Date: Sun, 27 Sep 1998 21:45:20 +0200
Message-ID: <12754.906925520@verdi.nethelp.no>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> > Of course, I would rather have everything be explicit, but that has
> > been shouted down when I suggested it, too.
> 
> int fast1/0
>  ip access-group nosmurf out
> !
> int eth3/0
>  ip access-group mumblefrotz in
> !
> line vty 0 3
>  access-class 27
> !
> 
> ...sound familiar?

Very. I'd love to have something similar to Cisco access lists available.

Steinar Haug, Nethelp consulting, sthaug@nethelp.no

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message