load ipfw table addresses from file

Ivan Voras ivoras at freebsd.org
Fri Apr 9 09:26:00 UTC 2010


On 04/09/10 10:06, Julian Elischer wrote:
> On 4/9/10 1:02 AM, Alex Keda wrote:
>> 09.04.2010 11:14, Hizel Ildar пишет:
> 
>>>> # wc -l /root/scripts/db/table.25.txt
>>>> 61073 /root/scripts/db/table.25.txt
>>>> # date&& for i in `cat /root/scripts/db/table.25.txt`; do ipfw table
>>>> 25 add $i; done&& date
>>>> пятница, 9 апреля 2010 г. 10:42:01 (MSD)
>>>> пятница, 9 апреля 2010 г. 10:52:43 (MSD)
>>>> #
>>>> it took more than 10 minutes on busy server =(
>>>> _______________________________________________
> [...]
> 
>>> but file like:
>>> table 25 add 192.168.0.36
>>> table 25 add 192.168.0.37
>>> table 25 add 192.168.0.38
>> thanks, it is faster, but - this is a crutch =)
> 
> yes but it is a crutch that is 600 times faster.

I've never used the feature but ipfw has "-p preprocessor" argument
which looks like it might be used to process the file containing raw IP
addresses with a simple script that appends "table 25 add" to each
address before returning it to ipfw.



More information about the freebsd-current mailing list