From owner-freebsd-security Mon Feb 28 18:54:34 2000 Delivered-To: freebsd-security@freebsd.org Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207]) by hub.freebsd.org (Postfix) with ESMTP id 07B9837BA27 for ; Mon, 28 Feb 2000 18:54:25 -0800 (PST) (envelope-from cjc@cc942873-a.ewndsr1.nj.home.com) Received: (from cjc@localhost) by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.9.3) id VAA32131; Mon, 28 Feb 2000 21:59:04 -0500 (EST) (envelope-from cjc) Date: Mon, 28 Feb 2000 21:59:04 -0500 From: "Crist J. Clark" To: Lev Serebryakov Cc: All Subject: Re: ipfw log accounting Message-ID: <20000228215904.B31743@cc942873-a.ewndsr1.nj.home.com> Reply-To: cjclark@home.com References: <1774.000229@imc.macro.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <1774.000229@imc.macro.ru>; from lev@imc.macro.ru on Tue, Feb 29, 2000 at 01:46:53AM +0300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, Feb 29, 2000 at 01:46:53AM +0300, Lev Serebryakov wrote: [snip] > And one more question: > How could I write rule, which skip all broadcast traffic? My > computer is on big provider's net, and here is more than one > broadcast address (many subnets on one wire)... Never tried this and haven't glanced at the source to see if it has a chance of working, but _theoretically_ is there a reason that, deny ip from 0.0.0.255:0.0.0.255 to any A "reversed" netmask won't work? -- Crist J. Clark cjclark@home.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message