Freddie Cash wrote:
I'm just curious if there is any information available on how quickly ipfw processes rules, and whether or not a long list of ports in a single rule makes things faster or slower?

Just curious if there is a big difference between:

ipfw add allow tcp from any to me 22,25,80,110,143,443,10000 in recv fxp0

and

ipfw add allow tcp from any to me 22    in recv fxp0
ipfw add allow tcp from any to me 25    in recv fxp0
ipfw add allow tcp from any to me 80    in recv fxp0
ipfw add allow tcp from any to me 110   in recv fxp0
ipfw add allow tcp from any to me 143   in recv fxp0
ipfw add allow tcp from any to me 443   in recv fxp0
ipfw add allow tcp from any to me 10000 in recv fxp0

Other than the ability to track traffic through each port, of course.



the first is faster.


_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to