ipfw(8) lookup tables now available for RELENG_4
Ruslan Ermilov
ru at FreeBSD.org
Fri Jun 11 07:32:59 GMT 2004
On Thu, Jun 10, 2004 at 07:11:32PM -0400, Chuck Swiger wrote:
> Ruslan Ermilov wrote:
> >For those of you interested, here you can find a patch that
> >adds the IPFW2 lookup tables feature to RELENG_4:
> >
> >http://people.FreeBSD.org/~ru/patches/ipfw_tables.patch
> >
> >I plan to commit it next Friday. Feedback is appreciated.
>
> Was the patch not made relative to /usr/src?
>
It was. I don't know what your problem is.
> Anyway, I just finished rebuilding kernel and world, so the changes compile
> fine, and it looks like my machine rebooted cleanly. Seems to work okay
> with a trivial IPFW2 ruleset, I haven't tried anything more complicated:
>
> 00100 78 25096 allow ip from any to any via lo0
> 00200 0 0 deny ip from any to 127.0.0.0/8
> 00300 0 0 deny ip from 127.0.0.0/8 to any
> 65000 513 53267 allow ip from any to any
>
Well, I'm mostly interested in guys testing the new IPFW2 tables
feature. It otherwise won't affect anything if not used. ;)
Thanks anyway.
Cheers,
--
Ruslan Ermilov
ru at FreeBSD.org
FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20040611/5bf3fced/attachment.bin
More information about the freebsd-stable
mailing list