Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Mar 2010 12:44:29 +0100
From:      Luigi Rizzo <rizzo@iet.unipi.it>
To:        Oliver Fromme <olli@lurza.secnetix.de>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: Small problem with "ipfw list"
Message-ID:  <20100310114429.GB65396@onelab2.iet.unipi.it>
In-Reply-To: <201003101120.o2ABKXoa002322@lurza.secnetix.de>
References:  <20100309164611.GB53491@onelab2.iet.unipi.it> <201003101120.o2ABKXoa002322@lurza.secnetix.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Mar 10, 2010 at 12:20:33PM +0100, Oliver Fromme wrote:
> Luigi Rizzo wrote:
>  > On Tue, Mar 09, 2010 at 03:36:15PM +0100, Oliver Fromme wrote:
>  > > Just a question:  Is the output from "ipfw list" supposed
>  > > to be in the same rule format that is accepted as input?
>  > 
>  > it is not, partly due to backward compatibility.
> 
> I see.
> 
>  > If you try "ipfw -c show" then you might have better luck though.
> 
> Unfortunately that makes things even worse.  The "dst-ip"
> word is still there, and additionally any rules containing
> "from any to any" are shortened, which is also not accepted
> as input to ipfw(8).

ok this means that i need to fix the output so that it is
in a form acceptable to be fed back to ipfw.
I'll try to come up with a patch soon (possibly using -g as
an alias for -c if needed)

cheers
luigi

> What do you think about adding a new option that lists the
> rules in a format that can be fed back as input to ipfw(8)?
> There are several tools with similar options, for example
> "stty -g".  So far -g is not used in ipfw(8), so ...
> 
> Best regards
>    Oliver
> 
> -- 
> Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
> Handelsregister: Registergericht Muenchen, HRA 74606,  Gesch?ftsfuehrung:
> secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht M?n-
> chen, HRB 125758,  Gesch?ftsf?hrer: Maik Bachmann, Olaf Erb, Ralf Gebhart
> 
> FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd
> 
> I suggested holding a "Python Object Oriented Programming Seminar",
> but the acronym was unpopular.
>         -- Joseph Strout
> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100310114429.GB65396>