Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 May 2002 11:12:55 +0100
From:      Daniel Bye <dan@slightlystrange.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: ipfw range filter?
Message-ID:  <20020528101255.GC27216@icarus.slightlystrange.org>
In-Reply-To: <20020528100031.56453.qmail@web14802.mail.yahoo.com>
References:  <20020528100031.56453.qmail@web14802.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, May 28, 2002 at 03:00:31AM -0700, Chris Appleton wrote:
> is it possible to filter a range of ip's with one rule?
> 
> unfortunately i've got a c class and just have the one subnet so i
> don't think i can use /x for instance.  i could try and create proper
> subnets, but of course want the quickie.
> 
> i don't like having 60 rules for pop and smtp to hosted servers.
> 
> thanks advance,
> 
> chris

ipfw understands CIDR notation, so you can put, e.g., 192.168.0.0/24
in any position that expects an address.  

As long as the range you are interested in starts and stops at bit
boundaries, this'll work.

Is that what you meant?

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3D73 AF47 D448 C5CA 88B4 0DCF 849C 1C33 3C48 2CDC
                                                                     _
                                              ASCII ribbon campaign ( )
                                         - against HTML, vCards and  X
                                - proprietary attachments in e-mail / \

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020528101255.GC27216>