Date: Thu, 30 Nov 2000 22:23:33 -0800 (PST) From: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net> To: cjclark@alum.mit.edu Cc: bdan@c-zone.net (Dan Babb), jon_slivko@simphost.com (Jonathan M. Slivko), freebsd-security@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: Danger Ports Message-ID: <200012010623.WAA46764@gndrsh.dnsmgr.net> In-Reply-To: <20001130221631.E99903@149.211.6.64.reflexcom.com> from "Crist J . Clark" at "Nov 30, 2000 10:16:31 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> On Thu, Nov 30, 2000 at 09:43:57AM -0800, Rodney W. Grimes wrote: > > [snip] > > > > access-list 110 deny ip 172.16.0.0 0.15.255.255 any log > > > access-list 110 deny ip 172.31.0.0 0.0.255.255 any log > > > access-list 110 deny ip any 172.16.0.0 0.15.255.255 log > > access-list 110 deny ip any 172.31.0.0 0.0.255.255 log > > Is it me? Isn't the second network in each a subset of the first? Whooopss... I didn't even read the access-list that close, and your right the 172.31.0.0 is infact a subset of the 172.16.0.0 rule. -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200012010623.WAA46764>