IPFW: more "orthogonal? state operations, push into 11?

[Bill Yuan]

It is more and more complex here!

On 8 June 2016 at 17:28, Jan Bramkamp <crest at rlwinm.de> wrote:

> On 07/06/16 10:00, Andrey V. Elsukov wrote:
>
>> On 07.06.16 09:31, wishmaster wrote:
>>
>>> With the following patch you will be able create two different states, I
>>>> think, and solve your task with NAT and dynamic rules:
>>>> https://reviews.freebsd.org/D6674
>>>>
>>>
>>> Will there be the patch in the 11-RELEASE?
>>>
>>
>> Hi,
>>
>> there are three patches for ipfw, that I want to commit:
>>         https://reviews.freebsd.org/D6420
>>         https://reviews.freebsd.org/D6434
>>         https://reviews.freebsd.org/D6674
>>
>> But we are in code slush and there aren't any positive review yet. So, I
>> guess they will be committed only after 11.0 would be branched.
>>
>
> To bad. Those all look very useful and and together would enable me to use
> my FreeBSD jail hosts for all packet filtering instead of running the
> traffic through a OpenBSD bhyve guest on each jail host.
>
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>