Date: Tue, 9 Sep 2003 10:45:52 -0700 (PDT) From: Julian Elischer <julian@elischer.org> To: Josh Brooks <user@mail.econolodgetulsa.com> Cc: freebsd-net@freebsd.org Subject: Re: how do I delete just one ipfw rule ? Message-ID: <Pine.BSF.4.21.0309091042420.46339-100000@InterJet.elischer.org> In-Reply-To: <20030909065259.A77579-100000@mail.econolodgetulsa.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 9 Sep 2003, Josh Brooks wrote: > > > > On Tue, 9 Sep 2003, Luigi Rizzo wrote: > > > no, it is not possible to delete them -- you have no way to tell > > which rule to delete when multiple rules share the same number. > > Are there any plans to make ipfw more flexible by changing the 65535 to > the next power of two ? So there are a lot more rules ? The rule number is only 16 bits long.. This is made use of in 'divert' where the rule number that caused the divert is in the port-number field when you do a recvfrom(). if you change this, it won't work.. On "sendto()" teh rule number is used to suggest where the packet "re-enters" the filter. if you pass it back unchanged then it reenters the filter at the next rule after the one that diverted it.. (i.e. where it left off) > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0309091042420.46339-100000>