ipfw table matching algorithm question

Ian Smith smithi at nimnet.asn.au
Sun Jun 15 12:01:07 UTC 2014


On Sun, 15 Jun 2014 18:08:59 +0800, Julian Elischer wrote:
 > On 6/15/14, 3:00 AM, Alexander V. Chernikov wrote:
 > > On 14.06.2014 21:35, Michael Sierchio wrote:
 > > > Luigi -
 > > > 
 > > > Does table entry matching use a longest prefix match?
 > > I'm not Luigi, but the answer is "yes" anyway :)
 > 
 > this may be about to change, because tables are getting  a rewrite,
 > but IP-based tables use the same code that the routing tables use.

It'd be a bit anti-POLA for the longest prefix match behaviour to 
change, though, especially with some tablearg usage.  Alexander?

cheers, Ian


More information about the freebsd-net mailing list