Re: your thoughts on a particualar ipfw action.

On 02.08.16 11:08, Julian Elischer wrote: > SO I was thinking how to use this, and the obvious way would be to have > a set of rules for each country, and use the "skipto tablearg" facility > to skip to the right rules for each country. But the trouble is that a > tablearg skipto is very

Re: your thoughts on a particualar ipfw action.

> Am 02.08.2016 um 05:08 schrieb Julian Elischer : > > looking for thoughts from people who know the new IPFW features well.. > > > A recent addition to our armory is the geoip program that, given an address > can tell you what country it is in and given a country code,

Re: your thoughts on a particualar ipfw action.

On Tue, Aug 2, 2016 at 1:08 AM, Julian Elischer wrote: > > A recent addition to our armory is the geoip program that, given an > address can tell you what country it is in and given a country code, can > give an ipfw table that describes all the ip addresses in that country.

Re: IPFW: more "orthogonal? state operations, push into 11?

Do we have any movement on these improvements? even similar functionality by different names is ok. 1/ ability to use keep-state without an implicit check-state. <--- most important for me. (store-state)? 2/ ability to keep-state without actually doing it < less important for me. 3/

your thoughts on a particualar ipfw action.

looking for thoughts from people who know the new IPFW features well.. A recent addition to our armory is the geoip program that, given an address can tell you what country it is in and given a country code, can give an ipfw table that describes all the ip addresses in that country. SO I

[Bug 211256] ipfw nat tablearg regression in FreeBSD 11

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211256 Mark Linimon changed: What|Removed |Added Keywords||regression