Call for testing: firewall protocol support

Pawel Tyll ptyll at nitronet.pl
Thu Dec 22 03:25:03 CET 2011


Hi Alexander,

> This patch adds 'firewall' protocol permitting prefixes announced to
> this protocol to be put in configured firewall table with optional value.
Thanks  for  implementing  this.  It  seems to be working fine so far.

Is  there  some simple filter function that will convert an IP address
to  integer? If not, then maybe it's worthwhile to allow
import filter { fw_value = gw; accept; }; to work. Something like:

# ipfw table 67 add 127.0.0.1 127.0.0.1
# ipfw table 67 list
127.0.0.1/32 2130706433
# ipfw -i table 67 list
127.0.0.1/32 127.0.0.1

Again, thanks and great work :)

PS. Get ready to be bothered about ng_eiface! ;>





More information about the Bird-users mailing list