> > One of the things I would do to optimize ipfw is:
> > - instead of keeping one list with all the rules, split the list (the
> > internal one) by interface and by direction (one list for ed1 incoming,
> > one list for ed1 outgoing, etc.).
>
> one skipto rule is enough to switch between two rulesets depending
> on direction, so this is not really worthwhile.
> I agree that having a `switch' type of rule for selecting interfaces
> would be a reasonable gain of efficiency (but then again.. how
> many interfaces is one using!)
It doesn't matter, it has to do the lookup on a per-interface basis. On
my firewall box, I have 11 interfaces.
Two ethernet, one loopback, 4 slip, and 4 tunnel.
I could easily see a speedup from using per-interface lists.
Nate
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
