Support for IPv6 tables in ipfw?

[Kevin Oberman]

> From: Raffaele De Lorenzo <raffaele.delorenzo at libero.it>
> Date: Wed, 11 Feb 2009 23:50:34 +0100
> 
> Hi,
> I developed with Luigi (as mentor) and Mariano Tortoriello the first  
> release of ipfw with ipv6 extension. If you and the FreeBSD Community  
> think that the tables functional  is a good feature i can develop it  
> for IPv6 protocol.

Tables are invaluable for several functions. The most important to me is
the ability to create a 'block' list that can be easily updated from a
program or script. With a table you just need:
add 00500 unreach port ip from table 86 to any
in your standard configuration and then a script can do:
table 22 add 2001:400:14:23::45
to add a system to the list. To do it without tables means finding an
available rule and inserting the rule in the main table.

I can do it without tables, but it works much better with them.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman at es.net			Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751