From owner-freebsd-hackers Thu Jan 16 19:06:25 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id TAA05827 for hackers-outgoing; Thu, 16 Jan 1997 19:06:25 -0800 (PST) Received: from tfs.com (tfs.com [140.145.250.1]) by freefall.freebsd.org (8.8.4/8.8.4) with SMTP id TAA05821 for ; Thu, 16 Jan 1997 19:06:22 -0800 (PST) Received: from schizo.dk.tfs.com by tfs.com (smail3.1.28.1) with SMTP id m0vl4cZ-0003wXC; Thu, 16 Jan 97 19:05 PST Received: from critter.dk.tfs.com (critter-home [193.162.32.19]) by schizo.dk.tfs.com (8.8.2/8.7.3) with ESMTP id EAA05593; Fri, 17 Jan 1997 04:05:31 +0100 (MET) Received: from critter.dk.tfs.com (localhost [127.0.0.1]) by critter.dk.tfs.com (8.8.2/8.8.2) with ESMTP id EAA02881; Fri, 17 Jan 1997 04:06:45 +0100 (MET) To: Darren Reed cc: brian@awfulhak.demon.co.uk (Brian Somers), proff@suburbia.net, hackers@freebsd.org Subject: Re: ipfw patches to test In-reply-to: Your message of "Fri, 17 Jan 1997 12:42:25 +1100." <199701170143.RAA01789@freefall.freebsd.org> Date: Fri, 17 Jan 1997 04:06:45 +0100 Message-ID: <2879.853470405@critter.dk.tfs.com> From: Poul-Henning Kamp Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk In message <199701170143.RAA01789@freefall.freebsd.org>, Darren Reed writes: >> > > >> > > Basically you can now say >> > > >> > > ipfw add deny !from 192.168.23.0/30 to 140.145.230.0/24 >> > > >> >> What's the difference between the above and >> >> ipfw add allow from 192.168.23.0/30 to 140.145.230.0/24 >> ipfw add deny from any to 140.145.230.0/24 > In the top case I can go on filter on the 192.168 -> 140.145 traffic, in the bottom case it has all been allowed. -- Poul-Henning Kamp | phk@FreeBSD.ORG FreeBSD Core-team. http://www.freebsd.org/~phk | phk@login.dknet.dk Private mailbox. whois: [PHK] | phk@tfs.com TRW Financial Systems, Inc. Power and ignorance is a disgusting cocktail.