10.08.2021 08:08, Eugene Grosbein пишет: > Such ruleset could decrease filtering overhead several times but I'm > afraid that ipfw is not right tool for this task at the moment. > > ipfw has "tables" to optimize large list matching and they perform > great but for layer3 IP matching, not for layer2 MAC matching.
We have a patch that adds ability to keep MAC addresses in the tables. I hope we will push it into upstreem soon. -- WBR, Andrey V. Elsukov
OpenPGP_signature
Description: OpenPGP digital signature
