From owner-freebsd-questions@FreeBSD.ORG Mon Dec 15 07:49:45 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CB4EDFD4 for ; Mon, 15 Dec 2014 07:49:45 +0000 (UTC) Received: from mail-la0-x22b.google.com (mail-la0-x22b.google.com [IPv6:2a00:1450:4010:c03::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4E6C12F2 for ; Mon, 15 Dec 2014 07:49:45 +0000 (UTC) Received: by mail-la0-f43.google.com with SMTP id s18so8876461lam.2 for ; Sun, 14 Dec 2014 23:49:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=miqWlPttM32EtBgJ4y0icTpBIfumqofMgYWBhlTxUpw=; b=ABKR+nQqZhsDs4x3q3HOuAetnTJdFmRgtoJukgxXX+ngu1RTieZTETgqezWm2I3Eps FXpRzrw74e0zhh0EBn+O6MUGd9Ezllw5JIZOdw2i7OIN+tM5gl16gjAhhZWN82ooYWtT jfIruUBn03SSWHfBZ2qX5mlRnTO7c/7LGFUOhRyX0Ji6uk5+uZVKddJVIHQLbCSJadAo VhkfSU8ybaZ3UFK1ZQLndy94Gxtcdg4S4l9zHrlLFzn2oAQAqJgRIBNo0iJvJf+rEoaP 5nz93Bi8sU7KgM7RG8GuEuYLx5zwGCJvtqhwsxxRRPIpoRQlLGX2Xe34NQdB0ZSnQGdk eySA== MIME-Version: 1.0 X-Received: by 10.112.150.71 with SMTP id ug7mr28787068lbb.73.1418629783365; Sun, 14 Dec 2014 23:49:43 -0800 (PST) Received: by 10.112.161.135 with HTTP; Sun, 14 Dec 2014 23:49:43 -0800 (PST) Date: Mon, 15 Dec 2014 11:19:43 +0330 Message-ID: Subject: can ipfw check all permit rules without search termination? From: s m To: freebsd-questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 07:49:45 -0000 hello guys, i want to define multiple rules for ipfw. i wanna know if there is any way to ipfw check all permit rules without termination search until it sees and deny rule??? i want to search terminate only when a deny rule meet. is there any option or sysctl variable to doing this for me? i read ipfw man page but find nothing. any comments or hints are appreciated. SAM