From owner-freebsd-questions@FreeBSD.ORG  Mon Mar 31 01:52:28 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B5BC037B404; Mon, 31 Mar 2003 01:52:28 -0800 (PST)
Received: from trillian.nitro.dk (port324.ds1-khk.adsl.cybercity.dk
	[212.242.113.79])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 4745B43FBD; Mon, 31 Mar 2003 01:52:27 -0800 (PST)
	(envelope-from simon@trillian.nitro.dk)
Received: by trillian.nitro.dk (Postfix, from userid 1000)
	id 7FD072E388; Mon, 31 Mar 2003 11:52:25 +0200 (CEST)
Date: Mon, 31 Mar 2003 11:52:25 +0200
From: "Simon L. Nielsen" <simon@nitro.dk>
To: "Ilia E. Chipitsine" <ilia@cgu.chel.su>
Message-ID: <20030331095224.GB87902@nitro.dk>
References: <20030330201632.R65324-100000@mail.cgu.chel.su>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="neYutvxvOLaeuPCA"
Content-Disposition: inline
In-Reply-To: <20030330201632.R65324-100000@mail.cgu.chel.su>
User-Agent: Mutt/1.5.3i
cc: ipfw@FreeBSD.ORG
cc: questions@FreeBSD.ORG
Subject: Re: how to aggregate rules using ipfw2 ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Mar 2003 09:52:32 -0000


--neYutvxvOLaeuPCA
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2003.03.30 20:18:53 +0600, Ilia E. Chipitsine wrote:
> how can I aggregate rules ...
>=20
> ipfw add allow ip from any to 192.168.0.0/16
> ipfw add allow ip from any to 10.0.0.0/8
>=20
> ... into the single rule, probably using { .. or .. } syntax?
> I read man page, tried few combination, but them don't work for me.

ipfw add allow ip from any to { 192.168.0.0/16 or 10.0.0.0/8 }

should do the trick.

--=20
Simon L. Nielsen

--neYutvxvOLaeuPCA
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+iA/X8kocFXgPTRwRAp3cAJ0Yu5dFjz2Ci7OC5/28rib1m/SRhACfT3c5
2qvzfHGoMNPt3GpN1SuVoPI=
=N9R1
-----END PGP SIGNATURE-----

--neYutvxvOLaeuPCA--