From owner-freebsd-questions@FreeBSD.ORG Sun Apr 4 15:15:49 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 53A09106564A for ; Sun, 4 Apr 2010 15:15:49 +0000 (UTC) (envelope-from maciej@suszko.eu) Received: from mail.suszko.eu (suszko.eu [174.136.96.226]) by mx1.freebsd.org (Postfix) with ESMTP id 1DE2A8FC0A for ; Sun, 4 Apr 2010 15:15:48 +0000 (UTC) Received: from oxygen.suszko.eu (localhost [127.0.0.1]) by mail.suszko.eu (Postfix) with ESMTP id 3CC443F561; Sun, 4 Apr 2010 14:53:20 +0000 (UTC) X-Virus-Scanned: amavisd-new using ClamaAV Received: from arsenic (host-89-228-110-179.olsztyn.mm.pl [89.228.110.179]) by mail.suszko.eu (Postfix) with ESMTPSA id 5FD7E3F450; Sun, 4 Apr 2010 14:53:13 +0000 (UTC) Date: Sun, 4 Apr 2010 16:56:37 +0200 From: Maciej Suszko To: freebsd-questions@freebsd.org Message-ID: <20100404165637.2124e14f@arsenic> In-Reply-To: References: X-Mailer: Claws Mail 3.7.5 (GTK+ 2.18.7; amd64-portbld-freebsd8.0) Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/8mcI1Li_xtz0MiWz=Gt9Z6k"; protocol="application/pgp-signature" Cc: carmel_ny@hotmail.com Subject: Re: Configuring IPFW IP range X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Apr 2010 15:15:49 -0000 --Sig_/8mcI1Li_xtz0MiWz=Gt9Z6k Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Carmel NY wrote: > This is my first attempt at configuring IPFW. I have it up and > running; however, I am not quite sure how to accomplish configuring > it to block an IP range. >=20 > Assume an IP range: 219.128.0.0 to 219.137.255.255 >=20 > That is an actual range: CHINANET Guangdong province network >=20 > I want to block the entire range. I am not sure how to do it in IPFW. > I have read the 'man' pages; however, I am not getting the syntax > correct since I cannot get the range added. #v+ tlhscd@arsenic:~ % ipcalc 219.128.0.0 - 219.137.255.255 deaggregate 219.128.0.0 - 219.137.255.255 219.128.0.0/13 219.136.0.0/15 #v- --=20 regards, Maciej Suszko. --Sig_/8mcI1Li_xtz0MiWz=Gt9Z6k Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (FreeBSD) iEYEARECAAYFAku4qK0ACgkQCikUk0l7iGpuGQCfT33evN/V2FwbJlsfNLaZoW1b G4EAn3FrTU935RNXKsMAdmGPHrK/sYwC =Aoys -----END PGP SIGNATURE----- --Sig_/8mcI1Li_xtz0MiWz=Gt9Z6k--