>>>>> "Andrey" == Andrey A Chernov <[EMAIL PROTECTED]> writes:

    Andrey> I think it is very contr-intuitive way, better action will
    Andrey> be "replace" if number is the same.

Nonsense. This is what 'add' and 'delete' are for.

    Andrey> For example "ipfw delete" takes number as an argument,
    Andrey> what rule it suppose to delete, if the number is the same?
    Andrey> I.e. how can I delete specific rule if all have the same
    Andrey> number? Etc, etc.

You can't, in which case you shouldn't use that facility. However, for
those cases where you *do* want to act on a grouped set of rules,
sharing rulesnumbers provides that ability. For example, I have a set
of rules that count all in- and out-bound traffic to each IP address
on an internal network. All of these are under a single rule
number. This makes it trivial to do things like take periodic
snapshots of the counters:

  ipfw show 2000 > $somefile; ipfw reset 2000

This takes care of 512 individual rule entries in one simple

Now if you want to make some useful changes to ipfw, find someone to
commit the fix in bin/18550. And get rid of the needlessly verbose
usage message ipfw spits out when it fails to parse a command. It
would be a lot more useful if ipfw printed (only) the failed command.
At least I might have a chance of seeing what the error is, instead of
having the usage message cause any useful information to scroll off
the console while the machine boots.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to