From owner-freebsd-stable Tue Dec 12 2:28: 3 2000 From owner-freebsd-stable@FreeBSD.ORG Tue Dec 12 02:27:59 2000 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mailgate.abacus.co.uk (mailgate.abacus.co.uk [194.130.48.21]) by hub.freebsd.org (Postfix) with ESMTP id 1D5FE37B400 for ; Tue, 12 Dec 2000 02:27:59 -0800 (PST) Received: from abacus.co.uk (pcantony.bl.abacus.co.uk [194.130.48.111]) by mailgate.abacus.co.uk (8.9.3/8.9.3) with ESMTP id KAA29270; Tue, 12 Dec 2000 10:25:14 GMT Sender: antony@mailgate.abacus.co.uk Message-ID: <3A35FD8C.AE17D589@abacus.co.uk> Date: Tue, 12 Dec 2000 10:27:24 +0000 From: Antony T Curtis Organization: Abacus Polar PLC (UK) X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.1.1-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: =?iso-8859-1?Q?R=E9mi?= Guyomarch Cc: freebsd-stable@FreeBSD.ORG Subject: Re: IPFIREWALL or IPFILTER? References: <00dd01c05e2e$e42a0700$0b6cffc8@infolink.com.br> <20001209112247.A22773@diabolic-cow.chatgris.net> <002301c062bd$2aeb0440$0b6cffc8@infolink.com.br> <20001210202817.C22773@diabolic-cow.chatgris.net> <20001210200204.I86825@elvis.mu.org> <20001211072244.H22773@diabolic-cow.chatgris.net> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Rémi Guyomarch wrote: > Without 'quick' in 'head' rules, ipf will process the entiere group 10 > rules, and will continue with the next, non-group rule (the first rule > in [...some other rules...]). > Yes, you can achieve the same thing with 'skipto' but at some point > you will start to have troubles managing rules numbering... I wrote a perl script to "validate" my rules before I apply them (and toast a box which could be miles away and inaccessible). Part of the functionality of the script is that I can assign labels and it would manage the rule numbering - allows me to make some exceedingly flexible rules using skipto :) -- ANTONY T CURTIS Tel: +44 (1635) 36222 Abacus Polar Holdings Ltd Fax: +44 (1635) 38670 > Practical people would be more practical if they would take a little > more time for dreaming. >  -- J. P. McEvoy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message