Re: Address lists (resolved)
Joseph Tam <[email protected]> Mon, 12 Dec 2011 19:27:02 -0800 (PST)
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <16587_1323746920_4EE6C668_16587_5889_1_Pine.GSO.4.64.1112121925390.7359@nodomain> |
On Mon, 12 Dec 2011, Michael T. Davis wrote: > The source where I found the code in ipf_y.y dealing with address > lists was from v4.1.15, so I can't say for sure whether this is available in > anything older than that. (Though I'm fairly certain [but I won't swear to > it] that the reference I found from Darren about interface lists might have > pre-dated this version.) Thanks for the tip. I found it useful to clean up our rule file. I can confirm that it works with the IPF distributed by Solaris10: # ipf -V ipf: IP Filter: v4.1.9 (592) Kernel: IP Filter: v4.1.9 The output of ipfstat suggest this is just a macro expansion: it results in separate distinct rules. Joseph Tam <[email protected]>