Date: Thu, 13 Mar 2008 08:26:07 -0300 From: AT Matik <asstec@matik.com.br> To: freebsd-ipfw@freebsd.org, vadim_nuclight@mail.ru Subject: Re: kern/80642: [ipfw] [patch] ipfw small patch - new RULE OPTION Message-ID: <200803130826.07875.asstec@matik.com.br> In-Reply-To: <slrnfthsg7.dgk.vadim_nuclight@hostel.avtf.net> References: <200803122100.m2CL0t7V088955@freefall.freebsd.org> <slrnfthsg7.dgk.vadim_nuclight@hostel.avtf.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 13 March 2008 06:21:11 Vadim Goncharov wrote: > Hi vwe@FreeBSD.org! > > On Wed, 12 Mar 2008 21:00:55 GMT; vwe@FreeBSD.org wrote about 'Re:=20 kern/80642: [ipfw] [patch] ipfw small patch - new RULE OPTION': > > State-Changed-From-To: open->suspended > > State-Changed-By: vwe > > State-Changed-When: Wed Mar 12 20:58:32 UTC 2008 > > State-Changed-Why: > > Awaiting maintainer interest. > > This may be useful for one, so we're not just closing this silently. > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=3D80642 > > Yes, this is useful, but some minor changes are needed, I think. First, > rename it to "bytelimit" or somewhat. Second, allow this to use tablearg > and possibly ability to reference a counter to corresponding dynamic rule, > to allow this to act for a specific IP or connection without need to write > many rules. Third, add packet counter as well. That's all possible with o= ne > opcode, though... I think the best would be that it works as "limit src-ip N" does, using=20 perhaps the limit keyword as well but as in ".... limit max-bytes N" what=20 would give sufficient possibilities for pass and skipto etc=20 =2D-=20 Atenciosamente, J.M. Respons=E1vel Plant=E3o Site Support Matik Infomatik Internet Technology (18)3551.8155 =A0(18)8112.7007 http://info.matik.com.br A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura. Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200803130826.07875.asstec>