opnsense / core

OPNsense GUI, API and systems backend
https://opnsense.org/
BSD 2-Clause "Simplified" License
3.36k stars 754 forks source link

Feature request: Traffic shaper allow multiple ip-s or subnets in one rule #1226

Closed tkald closed 8 years ago

tkald commented 8 years ago

Freebsd allows to define multiple ip-s or subnets in one rule, i.e.: pipe 900 ip from 192.168.0.0/24 to not 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8 in recv lagg0

So could OpnSense.

Also ability to invert subnet/ip match - not part from rule above.

AdSchellevis commented 8 years ago

@tkald I've added the feature, but am a little short in time. can you do some additional testing?

Install using:

opnsense-patch acb242ef
opnsense-patch 1667f2c3
fichtner commented 8 years ago

Hey, this is way cooler than you give it credit for!

# opnsense-patch acb242ef 1667f2c3

;)

tkald commented 8 years ago

I'd put exclamation mark (!) in front of the address (rules table) in case of invert match - like on fw rules. Otherwise ui works fine. No time for real testing today either, but visually ipfw pipes look ok.