[des@ofug.org: Re: cvs commit: src/sys/netinet ip_fw.c ip_fw.h src/sbin/ipfw ipfw.8 ipfw.c]

[Matthew Hunt <mph@astro.caltech.edu>]

----- Forwarded message from Dag-Erling Smorgrav <des@ofug.org> -----

To: Poul-Henning Kamp <phk@critter.freebsd.dk>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/sys/netinet ip_fw.c ip_fw.h src/sbin/ipfw ipfw.8 ipfw.c
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 13 Feb 2001 16:23:15 +0100

Poul-Henning Kamp <phk@critter.freebsd.dk> writes:
> It would be more elegant to have multiple lists of ipfw rules:
>         One input list per interface
>         One output list per interface
>         One list for packets being forwarded
>         One list for packets arriving locally
>         One list for packets originating locally

One list to rule them all
One list to find them
One list to bring them all
And in the firewall bind them
In the land of TCP/IP where the packets fly.

DES (sorry, couldn't resist)
-- 
Dag-Erling Smorgrav - des@ofug.org

----- End forwarded message -----

-- 
Matthew Hunt <mph@astro.caltech.edu> * I have to count the meat.
http://www.pobox.com/~mph/           *
===
This message was sent to mph-humor.  No guarantees of actual humor are
provided.  Archives and instructions are available from
<http://www.pobox.com/~mph/humor/>.