cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet in.h ip_fw.h ip_fw2.c raw_ip.c

[Ruslan Ermilov]

On Fri, Jun 11, 2004 at 02:22:47AM +0000, Darren Reed wrote:
> On Fri, Jun 11, 2004 at 12:40:59AM +0300, Ruslan Ermilov wrote:
[...]
> > and so forth.  And we have a small set of rules of the form:
> > 
> > deny ip from table(1,0) to table(0)	// bw=0
> > pipe 1 ip from table(1,128) to table(0)	// bw=128Kbps
> 
> And what if I do:
> deny 1 ip from table(1,128) to table(0)
       ^ wrong syntax
> or is that not allowed ?
> 
"table(t[,v])" just causes the match if there's an entry
for a given src/dst IP in table "t".  If optional "v" was
also specified, the match will be considered only if the
entry has this value too (otherwise, the value is ignored).
So yes, the command above is allowed, whatever real
meaning you put into it.


Cheers,
-- 
Ruslan Ermilov
ru at FreeBSD.org
FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/cvs-src/attachments/20040611/15ba6939/attachment.bin