Re: Complex ruleset questions

This is a discussion on Re: Complex ruleset questions within the IPFilter forums, part of the System Security and Security Related category; Thus spake Thomas Quinot (thomas@cuivre.fr.eu.org) [27/06/03 13:40]: > > specifying the allow rules ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 06-27-2003
Damian Gerow
 
Posts: n/a
Default Re: Complex ruleset questions

Thus spake Thomas Quinot (thomas@cuivre.fr.eu.org) [27/06/03 13:40]:
> > specifying the allow rules twice, but means that any rule insertions between
> > the 'skip' rules and the 'head' rule will break the skips. :(

>
> But there is no reason to insert anything between the skips, they
> notionally are part of the same single high-level operation consisting
> in branching into a group when any one in a set of predicates matches.
> Think of it the way a compiler would generate code for a complex boolean
> expression using a combination of elementary tests and jumps.


I know that and you know that, but in three years, someone who doesn't know
IPF very well won't necessarily know that.

As well, the ruleset is considerably more complex than the examples I've
given. We do have specific allows/denies on rl0/rl1 that shouldn't be
carried over into the other, and these will change over time.

It looks like using skip rules will be what I wind up doing, I just need to
get everything set up just so, and make sure I put big warnings in big
capitals in the rules file.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:58 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0