Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Feb 2000 21:59:04 -0500
From:      "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
To:        Lev Serebryakov <lev@imc.macro.ru>
Cc:        All <freebsd-security@FreeBSD.ORG>
Subject:   Re: ipfw log accounting
Message-ID:  <20000228215904.B31743@cc942873-a.ewndsr1.nj.home.com>
In-Reply-To: <1774.000229@imc.macro.ru>; from lev@imc.macro.ru on Tue, Feb 29, 2000 at 01:46:53AM %2B0300
References:  <1774.000229@imc.macro.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Feb 29, 2000 at 01:46:53AM +0300, Lev Serebryakov wrote:
[snip]
>   And one more question:
>   How could I write rule, which skip all broadcast traffic? My
>   computer is on big provider's net, and here is more than one
>   broadcast address (many subnets on one wire)...

Never tried this and haven't glanced at the source to see if it has a
chance of working, but _theoretically_ is there a reason that,

             deny ip from 0.0.0.255:0.0.0.255 to any

A "reversed" netmask won't work?
-- 
Crist J. Clark                           cjclark@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000228215904.B31743>