On 22.12.2011 06:25, Pawel Tyll wrote:
Hi Alexander,
This patch adds 'firewall' protocol permitting prefixes announced to this protocol to be put in configured firewall table with optional value. Thanks for implementing this. It seems to be working fine so far.
Is there some simple filter function that will convert an IP address to integer? If not, then maybe it's worthwhile to allow import filter { fw_value = gw; accept; }; to work. Something like: Such function should be added to filters API, yes. Unfortunately filters code is a bit hard to understand, but I'll try to look at it another time
# ipfw table 67 add 127.0.0.1 127.0.0.1 # ipfw table 67 list 127.0.0.1/32 2130706433 # ipfw -i table 67 list 127.0.0.1/32 127.0.0.1
Again, thanks and great work :)
PS. Get ready to be bothered about ng_eiface! ;>