Date: Fri, 17 Jan 1997 12:42:25 +1100 (EDT) From: Darren Reed <avalon@coombs.anu.edu.au> To: brian@awfulhak.demon.co.uk (Brian Somers) Cc: proff@suburbia.net, phk@freebsd.org, hackers@freebsd.org Subject: Re: ipfw patches to test Message-ID: <199701170143.RAA01789@freefall.freebsd.org> In-Reply-To: <199701162209.WAA01624@awfulhak.demon.co.uk> from "Brian Somers" at Jan 16, 97 10:09:08 pm
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Brian Somers, sie said: > > > > > > > Well, I needed this badly, so I looked at it, if somebody wants to > > > try out this little patch, please report how it goes. > > > > > > Basically you can now say > > > > > > ipfw add deny !from 192.168.23.0/30 to 140.145.230.0/24 > > > > > > or "!to" for that matter. Give it a whirl... > > > > > > Poul-Henning > > > > This is a good addition. When I was playing with the code I was > > quite puzzeled about the lack of this negative logic. > > What's the difference between the above and > > ipfw add allow from 192.168.23.0/30 to 140.145.230.0/24 > ipfw add deny from any to 140.145.230.0/24 Logically, none. >From the technical side, more memory, longer list, etc. Darren
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199701170143.RAA01789>