From owner-freebsd-ipfw@FreeBSD.ORG Sun Nov 7 19:59:14 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0455416A4CE for ; Sun, 7 Nov 2004 19:59:14 +0000 (GMT) Received: from shellma.zin.lublin.pl (shellma.zin.lublin.pl [212.182.126.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8ACFE43D46 for ; Sun, 7 Nov 2004 19:59:13 +0000 (GMT) (envelope-from pawmal-posting@freebsd.lublin.pl) Received: by shellma.zin.lublin.pl (Postfix, from userid 1018) id 86C9F347BA8; Sun, 7 Nov 2004 21:00:18 +0100 (CET) Date: Sun, 7 Nov 2004 21:00:18 +0100 From: Pawel Malachowski To: freebsd-ipfw@freebsd.org Message-ID: <20041107200018.GD88583@shellma.zin.lublin.pl> References: <1099856264.652.276.camel@Mobile1.276NET> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <1099856264.652.276.camel@Mobile1.276NET> User-Agent: Mutt/1.4.2i Subject: Re: Listing multiple subnets w/ specific host addresses.. X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2004 19:59:14 -0000 On Sun, Nov 07, 2004 at 10:37:44PM +0300, Martes Wigglesworth wrote: > Does anyone know how to list the following rule? I am unable to find a > working example of such a declaration. > > add log ip from any to \{ 192.168.1.0/24{a,b,c} or > 192.168.2.0/24{d,e,f,g} \} > > The backslash works while listing more than one interface at the end of > rules, however, whenever I use it as above, I get parenthesis errors. > This current format give the following error on the console: > > > sudo ipfw add pass log ip from any to \{ 192.168.1.0/24 { 23,24,35,60 > } or 192.168.2.0/24 { 24,25,26,50 }\} > ipfw: missing ")" This is a matter of shell. On tcsh: % ipfw add 31337 count ip from any to \{ 192.168.1.0/24\{7,5,2\} or 192.168.2.0/24\{1,6,8,11\} \} 31337 count ip from any to { 192.168.1.0/24{2,5,7} or dst-ip 192.168.2.0/24{1,6,8,11} } % ipfw show 31337 31337 0 0 count ip from any to { 192.168.1.0/24{2,5,7} or dst-ip 192.168.2.0/24{1,6,8,11} } Still, this `IP or dst-ip IP' on output looks weird... -- Paweł Małachowski