From owner-freebsd-net@FreeBSD.ORG  Thu Mar  1 11:01:32 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id DD6AE16A400
	for <freebsd-net@freebsd.org>; Thu,  1 Mar 2007 11:01:32 +0000 (UTC)
	(envelope-from rizzo@icir.org)
Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68])
	by mx1.freebsd.org (Postfix) with ESMTP id B5F4513C491
	for <freebsd-net@freebsd.org>; Thu,  1 Mar 2007 11:01:32 +0000 (UTC)
	(envelope-from rizzo@icir.org)
Received: from xorpc.icir.org (localhost [127.0.0.1])
	by xorpc.icir.org (8.12.11/8.13.6) with ESMTP id l21B1WBY044112;
	Thu, 1 Mar 2007 03:01:32 -0800 (PST)
	(envelope-from rizzo@xorpc.icir.org)
Received: (from rizzo@localhost)
	by xorpc.icir.org (8.12.11/8.12.3/Submit) id l21B1WjJ044111;
	Thu, 1 Mar 2007 03:01:32 -0800 (PST) (envelope-from rizzo)
Date: Thu, 1 Mar 2007 03:01:32 -0800
From: Luigi Rizzo <rizzo@icir.org>
To: Antonio Tommasi <antonio.tommasi@unile.it>
Message-ID: <20070301030132.A43934@xorpc.icir.org>
References: <a06240805c20c59dc6d06@[212.189.128.38]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <a06240805c20c59dc6d06@[212.189.128.38]>;
	from antonio.tommasi@unile.it on Thu, Mar 01, 2007 at 11:24:07AM
	+0100
Cc: freebsd-net@freebsd.org
Subject: Re: ipfw
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Mar 2007 11:01:32 -0000

On Thu, Mar 01, 2007 at 11:24:07AM +0100, Antonio Tommasi wrote:
> Hi to all,
> i want to know if it is possibile in my firewall.conf refer to an 
> external file where for example i indicate my source ip or/and my 
> destination ip of my rules.

this is not supported directly in /sbin/ipfw, because there
is no reason to replicate a scripting language within /sbin/ipfw.
Rather, you should create your configuration using a scripting
language of your choice (e.g. /bin/sh) and produce a suitable output
to feed /sbin/ipfw

cheers
luigi