On 24.01.2004, at 19:24, Jorgen Norrman wrote:
> A must have is the ability to make port lists or groups containing
> Another great feature would be groups containing ip-adresses.
If I had a dime for everytime I heard that... Yes, m0n0wall is going to
be able to do that sometime because the alias functionality will be
extended to allow assigning multiple addresses/networks to one alias.
BUT... this is not going to happen until ipfilter 4.0, for the simple
reason that it is not feasible with the current ipfilter 3.4! In theory
it is possible, but it can create such a terrible and inefficient mess
of a ruleset that I'm simply not going to bother with it. We can't
filter packets in PHP, so we have to use what the underlying operating
system offers. Yes, I know ipfw2 is better in that respect, but it's
not a solution either because natd sucks for multiple reasons that I've
So everyone please be patient and don't forget that several
web-interface-equipped commercial firewalls I know of don't support
that either. Go figure.