From owner-freebsd-hackers Thu Jan 16 14:13:56 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id OAA17030 for hackers-outgoing; Thu, 16 Jan 1997 14:13:56 -0800 (PST) Received: from who.cdrom.com (who.cdrom.com [204.216.27.3]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id OAA17022; Thu, 16 Jan 1997 14:13:51 -0800 (PST) Received: from awfulhak.demon.co.uk (awfulhak.demon.co.uk [158.152.17.1]) by who.cdrom.com (8.7.5/8.6.11) with ESMTP id OAA01372 ; Thu, 16 Jan 1997 14:13:47 -0800 (PST) Received: from awfulhak.demon.co.uk (localhost.coverform.lan [127.0.0.1]) by awfulhak.demon.co.uk (8.8.4/8.7.3) with ESMTP id WAA01624; Thu, 16 Jan 1997 22:09:08 GMT Message-Id: <199701162209.WAA01624@awfulhak.demon.co.uk> X-Mailer: exmh version 1.6.9 8/22/96 To: proff@suburbia.net cc: phk@freebsd.org, hackers@freebsd.org Subject: Re: ipfw patches to test In-reply-to: Your message of "Thu, 16 Jan 1997 13:06:16 +1100." <19970116020616.24911.qmail@suburbia.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 16 Jan 1997 22:09:08 +0000 From: Brian Somers Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > > > > Well, I needed this badly, so I looked at it, if somebody wants to > > try out this little patch, please report how it goes. > > > > Basically you can now say > > > > ipfw add deny !from 192.168.23.0/30 to 140.145.230.0/24 > > > > or "!to" for that matter. Give it a whirl... > > > > Poul-Henning > > This is a good addition. When I was playing with the code I was > quite puzzeled about the lack of this negative logic. What's the difference between the above and ipfw add allow from 192.168.23.0/30 to 140.145.230.0/24 ipfw add deny from any to 140.145.230.0/24 -- Brian , Don't _EVER_ lose your sense of humour....