From owner-freebsd-current@FreeBSD.ORG Sun Sep 5 15:41:57 2010 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A166510656A4 for ; Sun, 5 Sep 2010 15:41:57 +0000 (UTC) (envelope-from luigi@onelab2.iet.unipi.it) Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238]) by mx1.freebsd.org (Postfix) with ESMTP id 68AAE8FC19 for ; Sun, 5 Sep 2010 15:41:57 +0000 (UTC) Received: by onelab2.iet.unipi.it (Postfix, from userid 275) id 5EEE373098; Sun, 5 Sep 2010 17:53:11 +0200 (CEST) Date: Sun, 5 Sep 2010 17:53:11 +0200 From: Luigi Rizzo To: Anderson Eduardo Message-ID: <20100905155311.GA48095@onelab2.iet.unipi.it> References: <4C825094.5040204@secover.com.br> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4C825094.5040204@secover.com.br> User-Agent: Mutt/1.4.2.3i Cc: freebsd-current@freebsd.org Subject: Re: Using ipfw table names instead of numbers. X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Sep 2010 15:41:57 -0000 On Sat, Sep 04, 2010 at 10:58:44AM -0300, Anderson Eduardo wrote: > Hello developers, > > I use the ipfw firewall with many tables and, I would like of able to > use it with name/alias instead of just numbers. > > E.g: > > lab# ipfw table 1 name lanetwork > Setting table 1 to lanetwork > lab# ipfw table lanetwork add 192.168.0.0/24 > lab# ipfw table lanetwork list > 192.168.0.0/24 0 > lab# > > I think a good idea a patch to do that. if you have a patch feel free to post it. the main issue is that internally, for efficiency reason, the name must be translated to a number anyways, so before implementing it one must decide where the name-number translation table is stored and how it is managed The same applies to any name vs. number issue in ipfw/dummynet Service, protocol and host names solve these issues because there is a well defined place for the translation table. But, for instance, hostname mappings are static (translated at rule insertion time) whereas one might want a more dynamic behaviour (e.g. refresh whenever the DNS response expires). cheers luigi