Call for testing: firewall protocol support

Alexander V. Chernikov melifaro at yandex-team.ru
Fri Dec 23 10:54:53 CET 2011


On 22.12.2011 06:25, Pawel Tyll wrote:
> Hi Alexander,
>
>> This patch adds 'firewall' protocol permitting prefixes announced to
>> this protocol to be put in configured firewall table with optional value.
> Thanks  for  implementing  this.  It  seems to be working fine so far.
>
> Is  there  some simple filter function that will convert an IP address
> to  integer? If not, then maybe it's worthwhile to allow
> import filter { fw_value = gw; accept; }; to work. Something like:
Such function should be added to filters API, yes.
Unfortunately filters code is a bit hard to understand, but I'll try to 
look at it another time
>
> # ipfw table 67 add 127.0.0.1 127.0.0.1
> # ipfw table 67 list
> 127.0.0.1/32 2130706433
> # ipfw -i table 67 list
> 127.0.0.1/32 127.0.0.1
>
> Again, thanks and great work :)
>
> PS. Get ready to be bothered about ng_eiface! ;>
>
>




More information about the Bird-users mailing list