Heads up: You may need recompile of ipfw(8)

Andre Oppermann andre at freebsd.org
Fri Apr 23 07:44:46 PDT 2004


Dag-Erling Smørgrav wrote:
> Andre Oppermann <andre at freebsd.org> writes:
> 
>>         Due to a new option in ipfw (versrcreach) the ipfw(8) command
>>         needs to be recompiled.  Normal accept/reject rules without
>>         options are not affected but those with options may break until
>>         ipfw(8) is recompiled.
> 
> 
> any chance of renaming this to something less tongue-twisting, like
> maybe "reachable"?

I wanted it to stay in line with the other option "verrevpath" and the
Cisco equivalent:

   ipfw add 1000 deny ip from any to any not versrcreach

also known in Cisco-speak as:

   ip verify unicast source reachable-via any


-- 
Andre



More information about the freebsd-current mailing list