address specified as 1.2.3.4/24{128,35-55,89} Is this Correct????

[Robert Chalmers]

Hi,
Thanks. I was only running ipfw, not ipfw2. Put ipfw2 in place and all probelms solved.

cheers
Robert
  ----- Original Message ----- 
  From: zk 
  To: freebsd-security at freebsd.org 
  Sent: Saturday, December 27, 2003 9:55 PM
  Subject: Re: address specified as 1.2.3.4/24{128,35-55,89} Is this Correct????


  On Wed, Dec 24, 2003 at 02:09:12PM +1000, Robert Chalmers wrote:
  > The man page gives this example, however, when I attempt to use it, it seems
  > to block the whole set?
  > 
  > Could someone tell me what's going wrong here please. Thanks heaps..
  > 
  > This works,
  >         ${fwcmd} add deny log all from any to 203.1.96.1 in via ${oif}
  > 
  > This blocks the whole IP block, not just the list?
  >        ${fwcmd} add deny log all from any to 203.1.96.0/24{2,6-25,27-154,156-19 9,204-254} in via ${oif}
  > 

  Do you use ipfw2?
  It's not default on FreeBSD 4.x systems.
  And maybe you should quote {}
  ${fwcmd} add deny log all from any to '203.1.96.0/24{2,6-25,27-154,156-199,204-254}' (...)

  zk
  _______________________________________________
  freebsd-security at freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-security
  To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"