From owner-freebsd-questions  Mon Sep 24 22:26:12 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cx175057-a.ocnsd1.sdca.home.com (cx175057-a.ocnsd1.sdca.home.com [24.13.23.40])
	by hub.freebsd.org (Postfix) with ESMTP id 58C3237B407
	for <freebsd-questions@FreeBSD.ORG>; Mon, 24 Sep 2001 22:26:03 -0700 (PDT)
Received: from brian (dns.sonicboom.org [24.13.23.147])
	by cx175057-a.ocnsd1.sdca.home.com (8.11.6/8.11.3) with SMTP id f8P5P5l39086;
	Mon, 24 Sep 2001 22:25:09 -0700 (PDT)
	(envelope-from bri@sonicboom.org)
Message-ID: <017d01c14582$6ca06300$3324200a@sonicboom.org>
From: "Brian" <bri@sonicboom.org>
To: "Giorgos Keramidas" <charon@labs.gr>, <cyu0635@home.com>
Cc: <freebsd-questions@FreeBSD.ORG>
References: <20010924194829.V38657-100000@cx175057-a.ocnsd1.sdca.home.com> <3BAFF278.F2FA32EC@home.com> <20010925060347.A8387@hades.hell.gr>
Subject: Re: tcp wrapper
Date: Mon, 24 Sep 2001 22:23:47 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Thats not exactly correct.  All traffic is not class A traffic.  It sounds
like, for one reason or another, he wants to pass 0.x.y.z thru 126..x.y.z,
and deny all else.

perhaps this'll work, though it'll block all the class D multicast stuff

all : 128.0.0.0/128.0.0.0 : deny
all : all : allow

    Bri

----- Original Message -----
From: "Giorgos Keramidas" <charon@labs.gr>
To: <cyu0635@home.com>
Cc: "Brian Whalen" <bri@sonicboom.org>; <freebsd-questions@FreeBSD.ORG>
Sent: Monday, September 24, 2001 8:03 PM
Subject: Re: tcp wrapper


> cyu0635@home.com <cyu0635@home.com> wrote:
> > Thanks Brian
> >
> > But I mean is all Class A.
> > Is it possible just type one line instead?
> > I don't want to type 10.0.0.0,11.0.0.0------
>
> service : ALL : ...
>
> Since allowing all A class networks is effectively equivalent to ALL.
>
> -giorgos
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message