Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 May 2002 07:23:00 +0200
From:      Alain Thivillon <at@rominet.net>
To:        Naughty Taz <naughty_taz@hotmail.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: IPFW and IP/mask mathematics
Message-ID:  <20020511052300.GA22841@roadrunner.rominet.net>
In-Reply-To: <001e01c1f79e$78612390$626a003e@homepc>
References:  <001e01c1f79e$78612390$626a003e@homepc>

next in thread | previous in thread | raw e-mail | index | archive | help
Naughty Taz <naughty_taz@hotmail.com> écrivait (wrote) :

> Hi all,
> 
> I've been trying to get a ruleset for IPFW but was unable to figure out
> how to do it :(
> I'd appreciate it if someone can reply with the right ruleset for the
> following:
> 
> 1) allow traffic from 0.0.0.0 - XXX.128.0.0 
> 2) block traffic from XXX.128.0.0 - XXX.146.159.255

ipfw add deny all from xxx.128.0.0/12 to any
ipfw add deny all from xxx.144.0.0/15 to any
ipfw add deny all from xxx.146.0.0/16 to any
ipfw add allow all from any to any

-- 
Nom d'un chat de nom d'un chat !


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020511052300.GA22841>