Small problem with "ipfw list"
Oliver Fromme
olli at lurza.secnetix.de
Wed Mar 10 11:20:51 UTC 2010
Luigi Rizzo wrote:
> On Tue, Mar 09, 2010 at 03:36:15PM +0100, Oliver Fromme wrote:
> > Just a question: Is the output from "ipfw list" supposed
> > to be in the same rule format that is accepted as input?
>
> it is not, partly due to backward compatibility.
I see.
> If you try "ipfw -c show" then you might have better luck though.
Unfortunately that makes things even worse. The "dst-ip"
word is still there, and additionally any rules containing
"from any to any" are shortened, which is also not accepted
as input to ipfw(8).
What do you think about adding a new option that lists the
rules in a format that can be fed back as input to ipfw(8)?
There are several tools with similar options, for example
"stty -g". So far -g is not used in ipfw(8), so ...
Best regards
Oliver
--
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart
FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd
I suggested holding a "Python Object Oriented Programming Seminar",
but the acronym was unpopular.
-- Joseph Strout
More information about the freebsd-ipfw
mailing list