Date: Fri, 11 Jun 2004 10:32:30 +0300 From: Ruslan Ermilov <ru@FreeBSD.org> To: Chuck Swiger <cswiger@mac.com> Cc: stable@FreeBSD.org Subject: Re: ipfw(8) lookup tables now available for RELENG_4 Message-ID: <20040611073230.GC55472@ip.net.ua> In-Reply-To: <40C8EAA4.9000903@mac.com> References: <20040610211327.GA3040@ip.net.ua> <40C8EAA4.9000903@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--/e2eDi0V/xtL+Mc8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jun 10, 2004 at 07:11:32PM -0400, Chuck Swiger wrote: > Ruslan Ermilov wrote: > >For those of you interested, here you can find a patch that > >adds the IPFW2 lookup tables feature to RELENG_4: > > > >http://people.FreeBSD.org/~ru/patches/ipfw_tables.patch > > > >I plan to commit it next Friday. Feedback is appreciated. >=20 > Was the patch not made relative to /usr/src? >=20 It was. I don't know what your problem is. > Anyway, I just finished rebuilding kernel and world, so the changes compi= le=20 > fine, and it looks like my machine rebooted cleanly. Seems to work okay= =20 > with a trivial IPFW2 ruleset, I haven't tried anything more complicated: >=20 > 00100 78 25096 allow ip from any to any via lo0 > 00200 0 0 deny ip from any to 127.0.0.0/8 > 00300 0 0 deny ip from 127.0.0.0/8 to any > 65000 513 53267 allow ip from any to any >=20 Well, I'm mostly interested in guys testing the new IPFW2 tables feature. It otherwise won't affect anything if not used. ;) Thanks anyway. Cheers, --=20 Ruslan Ermilov ru@FreeBSD.org FreeBSD committer --/e2eDi0V/xtL+Mc8 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAyWAOqRfpzJluFF4RAhIpAJ9sQebMYMVTJywXVnvsK6I72KVDswCggp80 ZkZCV7zmJ2S7KaGCVI0fnaI= =rZr1 -----END PGP SIGNATURE----- --/e2eDi0V/xtL+Mc8--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040611073230.GC55472>