bug in the Makefile

2014-04-28 Thread Bill Yuan
I am still using the FreeBSD10. release version, and it said that the cdefs.h is not found, but the file was there, I did not touch it. Can someone help to check #make cc -O2 -pipe -DIPFIREWALL -DIPFIREWALL_VERBOSE -DIPFIREWALL_VERBOSE_LIMIT=1000 -DIPFIREWALL_DEFAULT_TO_ACCEPT -fno-strict-aliasing

Re: feature of `packet per second`

2014-05-02 Thread Bill Yuan
I was coding it in dummynet way yesterday, Personally I prefer to add it as a new action. By the way, Is there anybody want to say something about the ip_fw.h? there are two ip_fw.h files, one in /sys/netinet/ another in usr/include/netinet, it is better to remove one of it , or create a soft link

Re: feature of `packet per second`

2014-05-08 Thread Bill Yuan
OK then I will submit it as a patch in this weekend. On Fri, May 9, 2014 at 1:11 AM, Chris H wrote: > > On 5/8/14 15:38, Luigi Rizzo wrote: > >> On Thu, May 08, 2014 at 09:09:21AM +0800, bycn82 wrote: > >>> On 5/8/14 8:35, bycn82 wrote: > On 5/4/14 1:19, Luigi Rizzo wrote: > > > >

Re: Where do the boot time messages go?

2014-05-11 Thread Bill Yuan
1.The userland command "ipfw" will print the result directly on the stdout. it is using printf() method. 2.The "firewall_logging" is for ipfw kernel module, and depends on the net.inet.ip.fw.verbose_limit and it will be logged in the syslog. On Mon, May 12, 2014 at 2:08 PM, Ian Smith wrote: > O

Re: Network goes down when installing ipfw

2016-03-14 Thread Bill Yuan
Oh please lah. it is not ipfw3 On Monday, March 14, 2016, Ian Smith wrote: > On Mon, 14 Mar 2016 07:39:36 +0800, Julian Elischer wrote: > > On 14/03/2016 7:37 AM, Julian Elischer wrote: > > > On 11/03/2016 8:46 PM, Kulamani Sethi wrote: > > > > Dear all, > > > > > > > > I am using ipf

Re: IPFW: more "orthogonal? state operations, push into 11?

2016-06-08 Thread Bill Yuan
It is more and more complex here! On 8 June 2016 at 17:28, Jan Bramkamp wrote: > On 07/06/16 10:00, Andrey V. Elsukov wrote: > >> On 07.06.16 09:31, wishmaster wrote: >> >>> With the following patch you will be able create two different states, I think, and solve your task with NAT and dyna

Re: IPFW: more "orthogonal? state operations, push into 11?

2016-06-08 Thread Bill Yuan
In my opinion, keep-state == "if this kind of packet come again, we are going to perform the current action" check-state == "did we met this kind of packet before? Yes! then perform that action" so in DragonflyBSD, below commands are implemented to manipulate the "states" ipfw3 state show [

Re: ipfw table expiry.. how to do it..?

2016-09-15 Thread Bill Yuan
In Ipfw3, each table entry has its own counter and last hit timestamp for both directions. On 12 September 2016 at 12:12, Ian Smith wrote: > On Mon, 12 Sep 2016 11:04:26 +0800, Julian Elischer wrote: > > > Unfortunately we don't have any timers on table entries, so it's not > possible > > to s

ipfw table with MAC address

2018-12-28 Thread Bill Yuan
Hi, Just want to check whether the MAC address is supported by the ipfw tables? According to the man page, it is not supported probably! if so, any plan to support it? I need this feature. Regards, Bill Yuan ___ freebsd-ipfw@freebsd.org mailing list

Re: ipfw table with MAC address

2018-12-28 Thread Bill Yuan
Hi Alex, Any plan to add MAC support into the ipfw tables? Regards, Bill Yuan 2018年12月28日(金) 21:51 Bill Yuan : > Hi, > Just want to check whether the MAC address is supported by the ipfw > tables? According to the man page, it is not supported probably! if so, any > plan to suppor