your thoughts on a particualar ipfw action.

Andrey V. Elsukov bu7cher at yandex.ru
Tue Aug 2 12:37:45 UTC 2016


On 02.08.16 11:08, Julian Elischer wrote:
> SO I was thinking how to use this, and the obvious way would be to have
> a set of rules for each country, and use the "skipto tablearg" facility
> to skip to the right rules for each country. But the trouble is that a
> tablearg skipto is very inefficient. It's also a hard thing to set up
> with a set of rules for each country (how many countries are there in
> the internet allocation system?).

You can build ipfw with enabled LINEAR_SKIPTO and use the same rules for
most countries.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 563 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20160802/664b5f75/attachment.sig>


More information about the freebsd-ipfw mailing list