From owner-freebsd-bugs@FreeBSD.ORG Sun Sep 17 15:40:26 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E9B816A4D2 for ; Sun, 17 Sep 2006 15:40:26 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 05C3D43D5D for ; Sun, 17 Sep 2006 15:40:24 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k8HFeNoX031445 for ; Sun, 17 Sep 2006 15:40:23 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k8HFeNeL031444; Sun, 17 Sep 2006 15:40:23 GMT (envelope-from gnats) Resent-Date: Sun, 17 Sep 2006 15:40:23 GMT Resent-Message-Id: <200609171540.k8HFeNeL031444@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Joćo Rocha Braga Filho Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 351E016A403 for ; Sun, 17 Sep 2006 15:32:44 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id AC97D43D5E for ; Sun, 17 Sep 2006 15:32:43 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id k8HFWhcJ063020 for ; Sun, 17 Sep 2006 15:32:43 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id k8HFWhQN063019; Sun, 17 Sep 2006 15:32:43 GMT (envelope-from nobody) Message-Id: <200609171532.k8HFWhQN063019@www.freebsd.org> Date: Sun, 17 Sep 2006 15:32:43 GMT From: Joćo Rocha Braga Filho To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: misc/103328: sugestions about ipfw table X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Sep 2006 15:40:26 -0000 >Number: 103328 >Category: misc >Synopsis: sugestions about ipfw table >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Sun Sep 17 15:40:23 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Joćo Rocha Braga Filho >Release: 6.1 >Organization: Paratyinfo >Environment: >Description: Why not a struct? Something like this: tablearg tablearg_2 tablearg_MAC_1 tablearg_MAC_2 tablearg_IP_2 It can be used like this: ipfw pipe 110 config mask src-ip 0xffffffff bw 64Kbit/s queue 10Kbytes ipfw pipe 112 config mask src-ip 0xffffffff bw 256Kbit/s queue 40Kbytes ipfw pipe 210 config mask dst-ip 0xffffffff bw 64Kbit/s queue 10Kbytes ipfw pipe 212 config mask dst-ip 0xffffffff bw 256Kbit/s queue 40Kbytes ... ipfw table 1 add 192.168.2.2 110 210 00:01:02:03:04:05 ipfw table 1 add 192.168.0.2 112 212 00:03:04:05:06:07 ... ipfw add pipe tablearg ip from table(1) to any MAC any tablearg_MAC_1 ipfw add pipe tablearg_2 ip from any to table(1) MAC tablearg_MAC_1 any ... ipfw add deny ip from any to any It can help against spoofing IPs and limiting traffic. thanks, Joćo Rocha. >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: