Re: CARP and OUT rules

Joey Morin <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <CADJ4=eq2xfvS2nb97ZzvEzx8JA9bK4zxxFLawyLGM-hShD74tA@mail.gmail.com>
On Wed, Sep 7, 2011 at 11:53 AM, Tonix (Antonio Nati)
<[email protected]>wrote:

>
> With this small change manageability would become fantastic for ISP
> environments.
> Rules would be much less, and general speed of monowall would be better.
>

while i agree that this kind of feature would be much easier to manage and
maintain (especially in a situation with soooo many interfaces), it's
unlikely that it would improve performance.  i suspect that the
configuration feature you seek would still need to generate individual rules
for each interface, either at configuration time or dynamically at run time.

jj
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.