From owner-freebsd-ipfw  Wed Jul 10  2:31:52 2002
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3CD7037B400
	for <ipfw@freebsd.org>; Wed, 10 Jul 2002 02:31:49 -0700 (PDT)
Received: from iguana.icir.org (iguana.icir.org [192.150.187.36])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EA0B243E09
	for <ipfw@freebsd.org>; Wed, 10 Jul 2002 02:31:48 -0700 (PDT)
	(envelope-from rizzo@iguana.icir.org)
Received: (from rizzo@localhost)
	by iguana.icir.org (8.11.6/8.11.3) id g6A9VjQ92743;
	Wed, 10 Jul 2002 02:31:45 -0700 (PDT)
	(envelope-from rizzo)
Date: Wed, 10 Jul 2002 02:31:45 -0700
From: Luigi Rizzo <rizzo@icir.org>
To: Jens Trzaska <jt@barfoos.de>
Cc: ipfw@freebsd.org
Subject: Re: ipfw2 patches for -stable available
Message-ID: <20020710023145.A91972@iguana.icir.org>
References: <20020709023203.A83270@iguana.icir.org> <20020710092337.GB27538@anastasia.lan.blastermaster.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20020710092337.GB27538@anastasia.lan.blastermaster.de>; from jt@barfoos.de on Wed, Jul 10, 2002 at 11:23:37AM +0200
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ipfw.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ipfw>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ipfw>
X-Loop: FreeBSD.ORG

On Wed, Jul 10, 2002 at 11:23:37AM +0200, Jens Trzaska wrote:
> On Tue, Jul 09, 2002 at 02:32:04AM -0700, Luigi Rizzo wrote:
> > [Bcc to -stable as relevant there]
> > 
> > As the subject says, the latest patches to run ipfw2 on -stable are at
> > 
> > 	http://info.iet.unipi.it/~luigi/ipfw2.stable.020709.diffs
> 
> Great work. No problems so far.
> 
> But one question. Does the code also allow the new OR syntax you
> mentioned in -net? I tried to insert the following rule but it does
> not work.

you need to put braces around the OR block (one person
suggested that to avoid ambiguity).
Either braces {} or parentheses () do, but the latter need
to be escaped from the shell.

> anastasia:~#ipfw add allow ip from 10.11.9.3 or 10.11.9.2 to any

	ipfw add allow ip from { 10.11.9.3 or 10.11.9.2 } to any

also:

	ipfw add allow ip from 10.11.9.0/24{2,3} to any

does the same in this case.

	cheers
	luigi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message