From owner-freebsd-hackers Thu Oct 21 18:28:38 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from internal.mail.demon.net (internal.mail.demon.net [193.195.224.3]) by hub.freebsd.org (Postfix) with ESMTP id 7D27814A21 for ; Thu, 21 Oct 1999 18:28:35 -0700 (PDT) (envelope-from fanf@demon.net) Received: from fanf.eng.demon.net (fanf.eng.demon.net [195.11.55.89]) by internal.mail.demon.net with ESMTP id CAA11309; Fri, 22 Oct 1999 02:28:34 +0100 (BST) Received: from fanf by fanf.eng.demon.net with local (Exim 3.03 #2) id 11eTUy-0009Mv-00 for hackers@freebsd.org; Fri, 22 Oct 1999 02:28:04 +0100 To: hackers@freebsd.org Cc: mreimer@vpop.net From: Tony Finch Subject: Re: Class C hack instead of ifconfig aliases In-Reply-To: <380DF3F3.E22CFAF8@vpop.net> References: Message-Id: Date: Fri, 22 Oct 1999 02:28:04 +0100 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Matthew Reimer wrote: >Here's a way to do it without patches: > >1. in your webserver: > a. ipfw add fwd localhost from any to 1.2.3/24 http > b. add sections, like this: If you're using enough IP addresses to make this trick worthwhile then you're probably interested in mod_vhost_alias which is new in Apache 1.3.9. >Pros: > >- no need to 'ifconfig xyz alias...'. Big deal -- you still have to use an ipfw command instead. >- address matching is fast, since only a few ipfw rules are checked, > rather than lists of hundreds or thousands of IP addresses The NETALIAS patch (PR#12071) is smaller and faster than turning on IPFIREWALL and IPFIREWALL_FORWARD. Tony. -- the .@ person To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message