Re: IPFW rule sets and automatic rule numbering

2014-09-17 Thread bycn82
On 9/17/14 22:58, Freddie Cash wrote: Just to summarise everything: 1. Automatic rule numbering works beautifully if you only ever use the default rule set (set 0). Meaning, if you don't use any set commands at all. 2. If you manually number every rule, then using rule sets works beautif

Re: IPFW rule sets and automatic rule numbering

2014-09-17 Thread Freddie Cash
Just to summarise everything: 1. Automatic rule numbering works beautifully if you only ever use the default rule set (set 0). Meaning, if you don't use any set commands at all. 2. If you manually number every rule, then using rule sets works beautifully. 3. Doing a little set manipulation a

Re: IPFW rule sets and automatic rule numbering

2014-09-14 Thread Freddie Cash
On Sep 14, 2014 3:37 AM, "Willem Jan Withagen" wrote: > > On 13-9-2014 21:51, Freddie Cash wrote: > > You can replicate it using 3 rules, loaded into two sets: > > > > ipfw set disable 1 > > ipfw add allow ip from any to any > > ipfw add 65524 allow ip from any to any > > ipfw add allow ip from an

Re: IPFW rule sets and automatic rule numbering

2014-09-14 Thread bycn82
On 9/14/14 20:47, Willem Jan Withagen wrote: On 14-9-2014 13:44, Ian Smith wrote: On Sun, 14 Sep 2014 12:36:43 +0200, Willem Jan Withagen wrote: > On 13-9-2014 21:51, Freddie Cash wrote: > > You can replicate it using 3 rules, loaded into two sets: > > > > ipfw set disable 1 > > ipfw a

Re: IPFW rule sets and automatic rule numbering

2014-09-14 Thread Willem Jan Withagen
On 14-9-2014 13:44, Ian Smith wrote: > On Sun, 14 Sep 2014 12:36:43 +0200, Willem Jan Withagen wrote: > > On 13-9-2014 21:51, Freddie Cash wrote: > > > You can replicate it using 3 rules, loaded into two sets: > > > > > > ipfw set disable 1 > > > ipfw add allow ip from any to any > > > ipfw

Re: IPFW rule sets and automatic rule numbering

2014-09-14 Thread Ian Smith
On Sun, 14 Sep 2014 12:36:43 +0200, Willem Jan Withagen wrote: > On 13-9-2014 21:51, Freddie Cash wrote: > > You can replicate it using 3 rules, loaded into two sets: > > > > ipfw set disable 1 > > ipfw add allow ip from any to any > > ipfw add 65524 allow ip from any to any > > ipfw add al

Re: IPFW rule sets and automatic rule numbering

2014-09-14 Thread Willem Jan Withagen
On 13-9-2014 21:51, Freddie Cash wrote: > You can replicate it using 3 rules, loaded into two sets: > > ipfw set disable 1 > ipfw add allow ip from any to any > ipfw add 65524 allow ip from any to any > ipfw add allow ip from any to any > ipfw set swap 1 0 > > Run that two or 3 times. Every rule

Re: IPFW rule sets and automatic rule numbering

2014-09-13 Thread Freddie Cash
You can replicate it using 3 rules, loaded into two sets: ipfw set disable 1 ipfw add allow ip from any to any ipfw add 65524 allow ip from any to any ipfw add allow ip from any to any ipfw set swap 1 0 Run that two or 3 times. Every rule will be numbered 65534 after the 2nd or 3rd run. I expect

Re: IPFW rule sets and automatic rule numbering

2014-09-13 Thread Alexander V. Chernikov
On 11.09.2014 19:01, Freddie Cash wrote: Good morning everyone, Just wondering if I'm doing things wrong, or if those two features (rule sets and auto incrementing rule numbers) just don't play well together. Until now, I've used the auto-incrementing feature to minimize the amount of work I ne

Re: IPFW rule sets and automatic rule numbering

2014-09-13 Thread bycn82
On 9/11/14 23:02, Freddie Cash wrote: Forgot to mention, this is 64-bit FreeBSD 10.0-RELEASE-p7, using Intel i350-T4 (igb) NICs. why not explain the situation by providing a set of rules which can replicate the problem you mentioned instead of your long long email? _

Re: IPFW rule sets and automatic rule numbering

2014-09-11 Thread Freddie Cash
Forgot to mention, this is 64-bit FreeBSD 10.0-RELEASE-p7, using Intel i350-T4 (igb) NICs. -- Freddie Cash fjwc...@gmail.com ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to