From owner-cvs-all@FreeBSD.ORG Thu Feb 26 14:49:30 2004 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1262B16A4CE; Thu, 26 Feb 2004 14:49:30 -0800 (PST) Received: from elektra.telenet-ops.be (elektra.telenet-ops.be [195.130.132.49]) by mx1.FreeBSD.org (Postfix) with ESMTP id 56E5943D31; Thu, 26 Feb 2004 14:49:29 -0800 (PST) (envelope-from rimshot@pandora.be) Received: from localhost (apate.telenet-ops.be [195.130.132.57]) by elektra.telenet-ops.be (Postfix) with SMTP id 3B2E835990; Thu, 26 Feb 2004 23:49:28 +0100 (MET) Received: from positron.local (D5E0864E.kabel.telenet.be [213.224.134.78]) by apate.telenet-ops.be (Postfix) with ESMTP id C2A6137E5A; Thu, 26 Feb 2004 23:49:27 +0100 (MET) Received: from positron.local (localhost [127.0.0.1]) by positron.local (8.12.9/8.12.9) with ESMTP id i1QMnQLi018618; Thu, 26 Feb 2004 23:49:27 +0100 (CET) Received: from localhost (rimshot@localhost) by positron.local (8.12.9/8.12.9/Submit) with ESMTP id i1QMnPVn001555; Thu, 26 Feb 2004 23:49:25 +0100 (CET) X-Authentication-Warning: positron.local: rimshot owned process doing -bs Date: Thu, 26 Feb 2004 23:49:24 +0100 (CET) From: Wouter Clarie X-X-Sender: rimshot@positron.local To: kientzle@acm.org In-Reply-To: <403E75F1.2070302@kientzle.com> Message-ID: References: <403E75F1.2070302@kientzle.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: Max Laier cc: "Jacques A. Vidrine" cc: cvs-src@freebsd.org cc: cvs-all@freebsd.org cc: src-committers@freebsd.org cc: Robert Watson cc: Steve Kargl Subject: Re: cvs commit: src/sys/contrib/pf/net if_pflog.cif_pflog.hif_pfsync.c src/sys/contrib/pf/netinet in4_cksum.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Feb 2004 22:49:30 -0000 On Thu, 26 Feb 2004, Tim Kientzle wrote: > Dunno about pf, but neither ipfw nor ipf have one feature I've been > looking for. I'd like to be able to say something like: > > create set BLACKLIST > drop ip in BLACKLIST > > where BLACKLIST is a user-defined and easily-modifiable set of arbitrary > addresses. Probably implemented via a hash-table or search tree. > > [snip] Piece of cake for pf: http://www.openbsd.org/faq/pf/tables.html Wouter