On Mon, 12 Dec 2011, Michael T. Davis wrote:

        The source where I found the code in ipf_y.y dealing with address
lists was from v4.1.15, so I can't say for sure whether this is available in
anything older than that.  (Though I'm fairly certain [but I won't swear to
it] that the reference I found from Darren about interface lists might have
pre-dated this version.)

Thanks for the tip.  I found it useful to clean up our rule file.
I can confirm that it works with the IPF distributed by Solaris10:

        # ipf -V
        ipf: IP Filter: v4.1.9 (592)
        Kernel: IP Filter: v4.1.9

The output of ipfstat suggest this is just a macro expansion: it results
in separate distinct rules.

Joseph Tam <[email protected]>

Reply via email to