From owner-freebsd-net@FreeBSD.ORG Mon Jul 10 22:40:54 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4FC8416A580 for ; Mon, 10 Jul 2006 22:40:54 +0000 (UTC) (envelope-from user@dhp.com) Received: from shell.dhp.com (shell.dhp.com [199.245.105.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9BC5D43D53 for ; Mon, 10 Jul 2006 22:40:53 +0000 (GMT) (envelope-from user@dhp.com) Received: by shell.dhp.com (Postfix, from userid 896) id DA0B53132A; Mon, 10 Jul 2006 18:40:50 -0400 (EDT) Date: Mon, 10 Jul 2006 18:40:50 -0400 (EDT) From: Ensel Sharon To: freebsd-net@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: counting (not) blocks of IPs in ipfw - please help X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jul 2006 22:40:54 -0000 I can't seem to get ipfw to handle a rule like this: ipfw add 00100 count ip from any not { 10.20.0.0/16 or 10.30.0.0/16 } to any via em0 in The error is: ipfw: missing ``to'' ipfw: unrecognised option [-1] 10.20.0.0/16 So if I remove the curlys and try just one IP block: ipfw add 00100 count ip from any not 10.20.0.0/16 to any via em0 in The error is: ipfw: invalid separator <.> in <10.20.0.0/16> Any help appreciated. Thanks.