From owner-freebsd-hackers  Wed Jan 15 18:06:42 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id SAA17607
          for hackers-outgoing; Wed, 15 Jan 1997 18:06:42 -0800 (PST)
Received: from pdx1.world.net (pdx1.world.net [192.243.32.18])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id SAA17600
          for <hackers@freebsd.org>; Wed, 15 Jan 1997 18:06:39 -0800 (PST)
From: proff@suburbia.net
Received: from suburbia.net (suburbia.net [203.4.184.1]) by pdx1.world.net (8.7.5/8.7.3) with SMTP id SAA26988 for <hackers@freebsd.org>; Wed, 15 Jan 1997 18:07:39 -0800 (PST)
Received: (qmail 24912 invoked by uid 110); 16 Jan 1997 02:06:16 -0000
Message-ID: <19970116020616.24911.qmail@suburbia.net>
Subject: Re: ipfw patches to test
In-Reply-To: <27547.853345090@critter.dk.tfs.com> from Poul-Henning Kamp at "Jan 15, 97 05:18:10 pm"
To: phk@freebsd.org
Date: Thu, 16 Jan 1997 13:06:16 +1100 (EST)
Cc: hackers@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> 
> Well, I needed this badly, so I looked at it, if somebody wants to
> try out this little patch, please report how it goes.
> 
> Basically you can now say
> 
> 	ipfw add deny !from 192.168.23.0/30 to 140.145.230.0/24
> 
> or "!to" for that matter.  Give it a whirl...
> 
> Poul-Henning

This is a good addition. When I was playing with the code I was
quite puzzeled about the lack of this negative logic.

Cheers,
Julian.