From owner-freebsd-ipfw@FreeBSD.ORG Wed Nov 24 19:26:20 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3C05016A4CE for ; Wed, 24 Nov 2004 19:26:20 +0000 (GMT) Received: from obaasan.animanga.nu (110.net90.skekraft.net [213.199.90.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7305E43D5A for ; Wed, 24 Nov 2004 19:26:19 +0000 (GMT) (envelope-from neko@grafit.it) Received: from localhost (localhost [127.0.0.1]) by obaasan.animanga.nu (Postfix) with ESMTP id DB41A19E033; Wed, 24 Nov 2004 20:26:17 +0100 (CET) Received: from obaasan.animanga.nu ([127.0.0.1]) by localhost (obaasan.animanga.nu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91007-02; Wed, 24 Nov 2004 20:26:17 +0100 (CET) Received: from [192.168.1.66] (ibook.potentia.org [192.168.1.66]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by obaasan.animanga.nu (Postfix) with ESMTP id 0BB3419E03E; Wed, 24 Nov 2004 20:26:17 +0100 (CET) In-Reply-To: <200411250050.55960.akhthar@carmatec.com> References: <200411250050.55960.akhthar@carmatec.com> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: =?ISO-8859-1?Q?Frans_Gidl=F6f?= Date: Wed, 24 Nov 2004 20:26:16 +0100 To: akhthar@carmatec.com X-Mailer: Apple Mail (2.619) X-Virus-Scanned: by amavisd-new at potentia.org cc: freebsd-ipfw@freebsd.org Subject: Re: block an IP for a particular port X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Nov 2004 19:26:20 -0000 /24 isn't the correct netmask, /8 is (by the looks of it anyway) On Nov 24, 2004, at 8:20 PM, Akhthar Parvez. K wrote: > Hi All, > > I just wanna block an IP range for a particular port. I used the > following > command. > > ipfw add 00150 drop tcp from 200.0.0.0/24 to any 80 > > I am able to see the following line in ipfw list > > 00150 deny tcp from 200.0.0.0/24 to any 80 > > But I don't think it's working. I am still getting the requests from > that IP > range. Do I need to do anything else to make it works? > > Thanks in advance. > > -- > With Regards, > > Akhthar Parvez.K > > --------------------- > NOTHING IS IMPOSSIBLE > Because Impossible itself says > I'M POSSIBLE > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"