Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Feb 2005 18:45:44 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
Cc:        freebsd-bugs@freebsd.org
Subject:   Re: kern/77570: [PATCH] ipfw: Multiple rules may have the same number.
Message-ID:  <20050219024544.GA86942@xor.obsecurity.org>
In-Reply-To: <20050216184051.GA30070@shellma.zin.lublin.pl>
References:  <200502161520.j1GFKGiU037098@freefall.freebsd.org> <20050216184051.GA30070@shellma.zin.lublin.pl>

next in thread | previous in thread | raw e-mail | index | archive | help

--qMm9M+Fa2AknHoGS
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Feb 16, 2005 at 07:40:51PM +0100, Pawel Malachowski wrote:
> On Wed, Feb 16, 2005 at 03:20:16PM +0000, Maxim Konovalov wrote:
>=20
> >  >  I thought it was some kind of a side effect in rule manipulation co=
de, but
> >  >  if some reasons push people to use this feature, feel free to close=
 this PR
> >  >  (and thanks for reaction).
> > =20
> >  This is just my opinion.  I'd suggest to discuss your patch in -net or
> >  -ipfw maillists and ask people what they think.
>=20
> I would vote this is a feature, not a bug. I personally rely on this
> behaviour in some of my ipfw rulesets.

So do I.  It makes it easy to remove a related group of rules all at
once.

Kris

--qMm9M+Fa2AknHoGS
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCFqhYWry0BWjoQKURAigLAJ44S2xifFk59TFVle8ZYyvrLcRGJQCdFtDI
ddtAHVIqxaNCUvrTUy1fdwk=
=I4a2
-----END PGP SIGNATURE-----

--qMm9M+Fa2AknHoGS--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050219024544.GA86942>