|
From: Franck B. <fbo...@ch...> - 2008-01-30 19:36:54
|
Le mercredi 30 janvier 2008 19:28, Olaf Westrik a écrit : > Gilles Espinasse wrote: > > My suggestion would be to create CONFIG_GREEN, CONFIG_BLUE, > > CONFIG_ORANGE, CONFIG_RED by default and put inside the number of > > interfaces of corresponding color inside. > > This way, it is trivial to test if an interface type is configured and in > > the futur, we may have a loop to configure each interface of the same > > color. > > I forgot to write that down, I actually considered GREEN_COUNT, > BLUE_COUNT etc. But the actual name is not that important. Important is > that they will be (always) present and set to 0,1,2 etc. > > This makes (especially if we make multiple colours someday) testing and > loop iteration very easy. > > > Olaf Here we come, fixed configuration is bad, un-extandable, un-understandable. Better now than never. The actual mistake you are doing (from1.4) is saying that a logical interface is a physical interface. Clearly separate the hardware interface with it's own and relevant parameters (eg an eth, an isdn, an usb, a wifi, whatever you want) from logical interfaces used in the firewall (red, green(s), ...) then use a bind system to say RED is this hardware interfaces, GREEN is that one, .... Franck |