Re: Address lists (resolved)

Joseph Tam <[email protected]> Mon, 12 Dec 2011 19:27:02 -0800 (PST)
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <16587_1323746920_4EE6C668_16587_5889_1_Pine.GSO.4.64.1112121925390.7359@nodomain>
On Mon, 12 Dec 2011, Michael T. Davis wrote:

> 	The source where I found the code in ipf_y.y dealing with address
> lists was from v4.1.15, so I can't say for sure whether this is available in
> anything older than that.  (Though I'm fairly certain [but I won't swear to
> it] that the reference I found from Darren about interface lists might have
> pre-dated this version.)

Thanks for the tip.  I found it useful to clean up our rule file.
I can confirm that it works with the IPF distributed by Solaris10:

 	# ipf -V
 	ipf: IP Filter: v4.1.9 (592)
 	Kernel: IP Filter: v4.1.9

The output of ipfstat suggest this is just a macro expansion: it results
in separate distinct rules.

Joseph Tam <[email protected]>