Unified rc.firewall ipfw me/me6 issue

Li, Qing qing.li at bluecoat.com
Sun Jan 10 19:40:42 UTC 2010


> 
> We only need one 'me' option that matches v4 and v6, because the
> other two can be implemented as 'ip4 me' and 'ip6 me' at no extra
> cost (the code for 'me' only scans the list corresponding to the
> actual address family of the packet).  I would actually vote for
> removing the 'me6' microinstruction from the kernel, and implement
> it in /sbin/ipfw by generating 'ip6 me'.
> 

	I agree with Luigi.

	-- Qing




More information about the freebsd-current mailing list