Using ipfw table names instead of numbers.
rizzo at iet.unipi.it
Sun Sep 5 15:41:57 UTC 2010
On Sat, Sep 04, 2010 at 10:58:44AM -0300, Anderson Eduardo wrote:
> Hello developers,
> I use the ipfw firewall with many tables and, I would like of able to
> use it with name/alias instead of just numbers.
> lab# ipfw table 1 name lanetwork
> Setting table 1 to lanetwork
> lab# ipfw table lanetwork add 192.168.0.0/24
> lab# ipfw table lanetwork list
> 192.168.0.0/24 0
> I think a good idea a patch to do that.
if you have a patch feel free to post it.
the main issue is that internally, for efficiency reason,
the name must be translated to a number anyways, so before implementing
it one must decide where the name-number translation table is stored
and how it is managed
The same applies to any name vs. number issue in ipfw/dummynet
Service, protocol and host names solve these issues because there
is a well defined place for the translation table. But, for instance,
hostname mappings are static (translated at rule insertion time)
whereas one might want a more dynamic behaviour (e.g. refresh
whenever the DNS response expires).
More information about the freebsd-current