Hi, The IPFW_DEFAULT_RULE is also the max allowed rule number. This value should be definitely public, so here is the patch, if there is no objections I'll commit it within a couple of days. After that, I plan to fix a couple of tools that need to know this value.
Best regards, rik
Index: ip_fw.h =================================================================== --- ip_fw.h (revision 182080) +++ ip_fw.h (working copy) @@ -29,6 +29,11 @@ #define _IPFW2_H /* + * The default rule number. It is also the max possible rule number. + */ +#define IPFW_DEFAULT_RULE 65535 + +/* * The kernel representation of ipfw rules is made of a list of * 'instructions' (for all practical purposes equivalent to BPF * instructions), which specify which fields of the packet Index: ip_fw2.c =================================================================== --- ip_fw2.c (revision 182080) +++ ip_fw2.c (working copy) @@ -122,7 +122,6 @@ static struct callout ipfw_timeout; static uma_zone_t ipfw_dyn_rule_zone; -#define IPFW_DEFAULT_RULE 65535 /* * Data structure to cache our ucred related
_______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"