From owner-freebsd-pf@FreeBSD.ORG Fri May 23 14:20:23 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C119106566C for ; Fri, 23 May 2008 14:20:23 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18]) by mx1.freebsd.org (Postfix) with ESMTP id 32C938FC17 for ; Fri, 23 May 2008 14:20:23 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost1.sentex.ca (8.14.2/8.14.2) with ESMTP id m4NEKIKJ059165; Fri, 23 May 2008 10:20:18 -0400 (EDT) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.8/8.13.3) with ESMTP id m4NEKHrN065857 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 23 May 2008 10:20:18 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <200805231420.m4NEKHrN065857@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 23 May 2008 10:20:12 -0400 To: "Vitaliy Vladimirovich" From: Mike Tancsa In-Reply-To: References: <200805231307.m4ND7Ip1065546@lava.sentex.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Scanned-By: MIMEDefang 2.64 on 64.7.153.18 Cc: freebsd-pf@freebsd.org Subject: Re[2]: How specify range IP? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 May 2008 14:20:23 -0000 At 09:34 AM 5/23/2008, Vitaliy Vladimirovich wrote: >Hi, >Try in CIDR notation. e.g. 209.85.128.0/17 > > >I know about CIDR notation, and what about if I need specify >something similary 10.0.10.1-10.0.10.8?? I usually do it in a series of CIDR notations when it does not match normal boundaries. I know on ports you have range operators (see pf.conf) but I am not sure there is the equiv for IP addresses. Is there some reason you dont want to use CIDR notation ? in your case, (10.0.10.0/29,10.0.10.8) ---Mike