Date: Tue, 28 Oct 2014 09:56:53 +0100 From: Cristiano Deana <cristiano.deana@gmail.com> To: "Spenst, Aleksej" <Aleksej.Spenst@harman.com> Cc: "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org> Subject: Re: How to block IP range Message-ID: <CAO82ECGgH-Tb1NnvJBA7%2BWyQyucoMphrn4h7ih9aKVkcV1FUGQ@mail.gmail.com> In-Reply-To: <CBA35483CE5B4D4B804BF128A77A61650E9A183E@HIKAWSEXMB02.ad.harman.com> References: <CBA35483CE5B4D4B804BF128A77A61650E9A16A7@HIKAWSEXMB02.ad.harman.com> <544E7883.1000705@egr.msu.edu> <CBA35483CE5B4D4B804BF128A77A61650E9A183E@HIKAWSEXMB02.ad.harman.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Oct 28, 2014 at 9:30 AM, Spenst, Aleksej
<Aleksej.Spenst@harman.com> wrote:
Hi
> block in quick on eth0 from "10.0.0.1 - 10.0.0.100" to 10.0.0.0
>
> and load the rules then pfctl does not complain about any syntax errors.
> However, if I look what rules are loaded with "pfctl -s rules" then I see only:
>
> block drop in quick on eth0 inet from 10.0.0.1 to 10.0.0.0
that should be "{ 10.0.0.1 - 10.0.0.100 }"
# grep test /etc/pf.conf
test="{ 10.0.0.1 - 10.0.0.100 }"
block in quick on $ext_if from $test
# pfctl -nvf /etc/pf.conf | grep 10.0
test = "{ 10.0.0.1 - 10.0.0.100 }"
block drop in quick on em1 inet from 10.0.0.1 - 10.0.0.100 to any
--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAO82ECGgH-Tb1NnvJBA7%2BWyQyucoMphrn4h7ih9aKVkcV1FUGQ>