On Fri, Dec 20, 2002 at 08:07:59PM +0100, Cedric Berger wrote: > Now that change could result in a missed skip-step optimization if there > are two identical AF_INET addresses loaded with a different values in > words 1-3. I've added some code in pf_ioctl to always zero words 1-3 > when we load the ruleset, but I'm not sure if I've cached all occurences.
Don't worry about that, I'll verify that. You haven't seen the latest changes in that code, and the regress tests we added. It's still fresh, actually now I'm in the perfect condition to touch that part :) > Yes, it works exactly like the routing table, with the following additional > feature: you can enter a "negative" entry. for example, you can put the > following into the tree: And with that, you just made negated address lists possible. :) Daniel
