On 30 Apr 2003, John A. Sullivan III wrote: > We've done some initial testing of the iprange patch and are thrilled > with it. However, is it any more processing intensive to use an iprange > match than to use the standard source or destination match, i.e., -s > rather than -m iprange --iprange --src/dst-range? Thanks- John Yes. The iprange match is an extension, which means that it's preceded by an implicit match against the any address (as if -s 0.0.0.0/0 -d 0.0.0.0/0 were specified). But I don't think you'd notice the extra overhead. :-) Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary
