Вести с полей
- From
- Slawa Olhovchenkov (2:5030/500)
- To
- All (2:5054/37.63)
- Date
- 2005-12-27T13:40:06Z
- Area
- RU.UNIX.BSD
Hello All!
glebius 2005-12-13 12:16:03 UTC
FreeBSD src repository
Modified files:
sbin/ipfw ipfw2.c
sys/netinet ip_fw.h ip_fw2.c
Log:
Add a new feature for optimizining ipfw rulesets - substitution of the
action argument with the value obtained from table lookup. The feature
is now applicable only to "pipe", "queue", "divert", "tee", "netgraph"
and "ngtee" rules.
An example usage:
ipfw pipe 1000 config bw 1000Kbyte/s
ipfw pipe 4000 config bw 4000Kbyte/s
ipfw table 1 add x.x.x.x 1000
ipfw table 1 add x.x.x.y 4000
ipfw pipe tablearg ip from table(1) to any
In the example above the rule will throw different packets to different pipes.
TODO:
- Support "skipto" action, but without searching all rules.
- Improve parser, so that it warns about bad rules. These are:
- "tablearg" argument to action, but no "table" in the rule. All
traffic will be blocked.
- "tablearg" argument to action, but "table" searches for entry with
a specific value. All traffic will be blocked.
- "tablearg" argument to action, and two "table" looks - for src and
for dst. The last lookup will match.
... Boomfuck programmers against glitches and bloatware
--- GoldED+/BSD 1.1.5
* Origin: (2:5030/500)
SEEN-BY: 46/50 50/203 400/814 450/186 1024 451/30 550/196 4635/4 4652/15
SEEN-BY: 5000/5000 5010/352 5011/13 5012/46 5015/10 28 5019/31 5020/154 175
SEEN-BY: 5020/400 545 549 715 758 830 937 1523 1604 1630 2020 2142 2238 2395
SEEN-BY: 5020/2450 2590 2871 4441 5021/3 29 5022/128 5025/3 750 5027/16
SEEN-BY: 5029/32 5030/49 115 436 473 500 556 966 1063 1900 1957 5031/47 70 72
SEEN-BY: 5035/38 5036/34 5040/47 5042/13 5045/7 5049/50 97 5053/16 5054/1 4 8
SEEN-BY: 5054/9 11 28 35 36 37 45 63 66 67 70 75 84 85 5055/95 5059/9 5062/1
SEEN-BY: 5062/10 5063/3 5067/2 5069/7 5070/1222 5077/70 5080/80 1003 5082/6
SEEN-BY: 5083/21 5085/13 5090/108 5094/4 5095/20 5096/18 6000/12 254 6001/10
PATH: 5030/500 5020/4441 545 5054/1 37