On Thu, Jun 30, 2011 at 10:14:44PM -0700, Julian Elischer wrote: > On 6/29/11 3:06 AM, Andrey V. Elsukov wrote: > >Author: ae > >Date: Wed Jun 29 10:06:58 2011 > >New Revision: 223666 > >URL: http://svn.freebsd.org/changeset/base/223666 > > > >Log: > > Add new rule actions "call" and "return" to ipfw. They make > > possible to organize subroutines with rules. > > > > The "call" action saves the current rule number in the internal > > stack and rules processing continues from the first rule with > > specified number (similar to skipto action). If later a rule with > > "return" action is encountered, the processing returns to the first > > rule with number of "call" rule saved in the stack plus one or higher. > > > > Submitted by: Vadim Goncharov > > Discussed by: ipfw@, luigi@ > > > >Modified: > what happens if the return target is removed in the meanwhile?
i suppose it has the same vulnerability of skipto: if the target goes away you continue from the next rule. _______________________________________________ svn-src-head@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-src-head To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"
