From owner-freebsd-ipfw@FreeBSD.ORG  Fri Feb  6 12:12:14 2004
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C1FD416A4CE
	for <freebsd-ipfw@freebsd.org>; Fri,  6 Feb 2004 12:12:14 -0800 (PST)
Received: from mail.park7.number.ru (host212-5-99-220.izmaylovo.ru
	[212.5.99.220])	by mx1.FreeBSD.org (Postfix) with ESMTP id 50A0443D45
	for <freebsd-ipfw@freebsd.org>; Fri,  6 Feb 2004 12:12:13 -0800 (PST)
	(envelope-from blacksir@number.ru)
Received: from blacksir.local ([192.168.2.166] helo=blacksir)
	by mail.park7.number.ru with smtp (Exim 4.30 #0 (Slackware))
	id 1ApCKN-000Gej-1L; Fri, 06 Feb 2004 23:11:51 +0300
From: "Vasenin Alexander aka BlackSir" <blacksir@number.ru>
To: "Jack L. Stone" <jacks@sage-american.com>,
	"Luigi Rizzo" <rizzo@icir.org>, "Don Bowman" <don@sandvine.com>
Date: Fri, 6 Feb 2004 23:10:25 +0300
Message-ID: <NKEJKOHEKMBIMCCEHEPKKEJKCCAA.blacksir@number.ru>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
In-Reply-To: <NKEJKOHEKMBIMCCEHEPKOEJJCCAA.blacksir@number.ru>
Importance: Normal
cc: freebsd-ipfw@freebsd.org
Subject: RE: Syntax to block 38 IPs
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Feb 2004 20:12:14 -0000

Mmmm.... of course
2. ipfw deny ip from 209.102.202.0/24 to any
    ipfw deny ip from 65.194.51.0/24 to any

or
2. ipfw deny ip from 209.102.202.0/24 to me
    ipfw deny ip from 65.194.51.0/24 to me

> > A follow-up question is that, if I do upgrade, will IPFW2 still
> use my old
> > rules until I can get around to tuning/tweaking...??
In my case(i using ipfw rules to count traffic from our clients. small ISP
company) - everything works perfect after upgrade ipfw1->ipfw2 with the same
ruleset.