From owner-freebsd-security  Mon Aug 13  0:26: 7 2001
Delivered-To: freebsd-security@freebsd.org
Received: from fs.novosoft.ru (fs.novosoft.ru [194.149.225.6])
	by hub.freebsd.org (Postfix) with ESMTP id AD0D037B409
	for <freebsd-security@freebsd.org>; Mon, 13 Aug 2001 00:26:02 -0700 (PDT)
	(envelope-from romaha@eoffice.ru)
Received: by fs.novosoft.ru with Internet Mail Service (5.5.2653.19)
	id <P6K3VF3C>; Mon, 13 Aug 2001 14:26:00 +0700
Message-ID: <D56EF1EAF8CCD21180A8009027177D3B6BF87B@fs.novosoft.ru>
From: Roman Zabolotnikov <romaha@eoffice.ru>
To: freebsd-security@freebsd.org
Subject: RE: Easy IPFW question...
Date: Mon, 13 Aug 2001 14:25:51 +0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Try to use ":" sign between ip and netmask

For example 
 ipfw add deny log all from 192.168.0.1:255.255.0.0 to any via ed0

 Please write what are you see on the console when execute this command.
Elso see on the output of command 
Ipfw list |grep 192.168
To make sure your command in kernel tables.
Do you use NAT on your network? It's may be the cause of your problem
> -----Original Message-----
> From: default - Subscriptions
> [mailto:default013subscriptions@hotmail.com] 
> Sent: Monday, August 13, 2001 2:12 PM
> To: freebsd-security@freebsd.org; freebsd-questions@freebsd.org
> Subject: Easy IPFW question...
> 
> 
> Hi,
> 
> I'm kinda new to IPFW, and I was unable to figure this out by
> myself...
> 
> I want to block an I.P. range, say 192.168.0.1, with a
> netmask of 255.255.0.0 ...
> 
> The rule I tried was this:
> ipfw add deny log all from 192.168.0.1/16 to any via ed0
> 
> I then attempted to access the server from this I.P. range
> and was able to do it normally... basically I don't want 
> anyone in this I.P. range to be able to see anything at all...
> 
> Thanks,
> 
> Jordan
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message