On Mon, Jan 05, 2004 at 11:02:33PM -0700, Michael Gale wrote: > > Hello, > > Even if you have a script that creates the chains for each IP .. if you > use all the IP's from .1 to .250. Then a packet will have to be compared > to 249 chains before if matches a chain if it is from or to IP .250. One can come up with a btree which should reduce the worst case lookup to a max of 8 lookups for a /24. Ramin > > This is not good. > > Michael.