Named states in ipfw (and old rulesets)

Lev Serebryakov lev at FreeBSD.org
Sun Aug 14 23:28:19 UTC 2016


Hello Lev,

Monday, August 15, 2016, 1:32:49 AM, you wrote:

>  Please, change this to some prefix to state name (:name, @name or something
> like this) or to "state-action(name)" format. It will be much better: less
> error-prone and will work without ugly warnings on old rulesets.
 Or, maybe, state names should be pre-declared (except "default"), as
 table's ones does. Like

 ipfw flow create my-name
 ipfw add allow ip from an to any keep-state my-name

 This will be somewhat bullet-proof!

-- 
Best regards,
 Lev                            mailto:lev at FreeBSD.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 960 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20160815/6097888a/attachment.sig>


More information about the freebsd-ipfw mailing list