Date: Thu, 4 Apr 2002 22:25:56 +0200 From: Christophe Prevotaux <c.prevotaux@hexanet.fr> To: Luigi Rizzo <rizzo@icir.org> Cc: freebsd-net@FreeBSD.ORG Subject: Re: IPFW Max Rule Discrete Number Limit Message-ID: <20020404222556.5ddeb117.c.prevotaux@hexanet.fr> In-Reply-To: <20020403111545.A98202@iguana.icir.org> References: <20020403205923.27d35e11.c.prevotaux@hexanet.fr> <20020403111545.A98202@iguana.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 3 Apr 2002 11:15:45 -0800 Luigi Rizzo <rizzo@icir.org> wrote: > On Wed, Apr 03, 2002 at 08:59:23PM +0200, Christophe Prévotaux wrote: > > Hi > > > > I have reached the 655 firewalling rules limit (with discrete values) > > in ipfw and I was wondering why ipfw will not let the user select > > the incremental step value in rules numbering ? also it should be > > possible to renumber these rules on the fly > > (though, i agree this is not this useful) > > you know you can assign explicit numbers to rules ? yes I know , do you seriously think I will do this ? What happens when I insert new rules ? I have to write a script to renumber them ? can't this be included in the ipfw itself for example by specifying a incremental step number for exemple ipfw -q flush -i [step] ipfw -q flush -i 10 in this manner no big changes to the rc.firewall or firewall rules files would be needed and everyone would be happy. > There is alot of magic you can do in userland rather than > relying on the kernel to cope with all sorts of different > user requirements... > > cheers > luigi > -- =============================================================== Christophe Prevotaux Email: c.prevotaux@hexanet.fr HEXANET SARL URL: http://www.hexanet.fr/ Z.A.C Les Charmilles Tel: +33 (0)3 26 79 30 05 3 Allée Thierry Sabine Direct: +33 (0)3 26 79 08 02 BP202 Fax: +33 (0)3 26 79 30 06 51686 Reims Cedex 2 FRANCE HEXANET Network Operation Center =============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020404222556.5ddeb117.c.prevotaux>