IPFW2 matching a list/set of interfaces

Anthony Volodkin anthonyv at brainlink.com
Thu Nov 11 11:15:40 PST 2004


That seems to work, thanks a lot!

-Anthony Volodkin

On Thu, 11 Nov 2004, Mihail  Balikov wrote:

ipfw add allow ip from any to 192.168.100.100 { via fxp0 or via ng0 or
via xl0 }

>
>
> ----- Original Message -----
> From: "Anthony Volodkin" <anthonyv at brainlink.com>
> To: <freebsd-net at freebsd.org>
> Sent: Thursday, November 11, 2004 10:05 AM
> Subject: IPFW2 matching a list/set of interfaces
>
>
> > Hi,
> >
> > I've been trying to implement some ipfw rules that would match several
> > interfaces using the recv/via/xmit keywords, however that seems to be
> > unsupported.  So a rule like:
> >
> > ipfw add allow ip from any to 192.168.100.100 via {fxp0,ng0,xl0}
> >
> > fails with an invalid ) error.  Alternatively if I use an or block, i
> > get an error about an invalid or block.
> >
> > Does anyone know whether this is actually possible/supported/supported
> > in the near future?  Sure I could make a rule for each interface, but in
> my situation that would not scale well.
> >
> > Thanks,
> >
> > Anthony Volodkin
> > _______________________________________________
> > freebsd-net at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-net
> > To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
> >
>
>


More information about the freebsd-net mailing list