Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 07 Nov 2004 23:24:07 +0300
From:      Martes Wigglesworth <martes.wigglesworth@earthlink.net>
To:        Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
Cc:        ipfw-mailings <freebsd-ipfw@freebsd.org>
Subject:   Re: Listing multiple subnets w/ specific host addresses..
Message-ID:  <1099859047.652.279.camel@Mobile1.276NET>
In-Reply-To: <20041107200018.GD88583@shellma.zin.lublin.pl>
References:  <1099856264.652.276.camel@Mobile1.276NET> <20041107200018.GD88583@shellma.zin.lublin.pl>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help

--=-fVCUVY18GnXB0CJqUcQc
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

So, this is the / functionality that is discussed in the manpage?  I
really wish there were more verbose version of these documents.  I was
wondering why that was the only way that I could list more than one
interface in one rule.

Thanks alot. The list saves me two days of headbanging, not set to
music, again.
-- 
Respectfully,


M.G.W.

System:
Asus M6N 
Intel Dothan 1.7
512MB RAM
40GB HD
10/100/1000 NIC
Wireless b/g (not working yet)
BSD-5.2.1
GCC-3.3.5/3.3.3(until I replace indigenous gcc)
IFORT-for linux(Intell Fortran)
gfortran
python-2.3
Perl-5.6.1/5.8.5
Java-sdk-1.4.2_5
KDE-3.1.4

--=-fVCUVY18GnXB0CJqUcQc
Content-Disposition: inline
Content-Description: Forwarded message - Re: Listing multiple subnets w/
	specific host addresses..
Content-Type: message/rfc822

Status: U
Return-Path: <owner-freebsd-ipfw@freebsd.org>
Received: from mx2.freebsd.org ([216.136.204.119]) by
	mx-a065b14.pas.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
	1cqTl26FT3NZFpN0 for <martes.wigglesworth@earthlink.net>;
	Sun, 7 Nov 2004	12:08:36 -0800 (PST)
Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18]) by
	mx2.freebsd.org (Postfix) with ESMTP id 4B66557A26; Sun,  7 Nov 2004
	20:07:30 +0000 (GMT) (envelope-from owner-freebsd-ipfw@freebsd.org)
Received: from hub.freebsd.org (localhost [127.0.0.1]) by hub.freebsd.org
	(Postfix) with ESMTP id 6941916A500;
	Sun,  7 Nov 2004 20:07:26 +0000 (GMT)
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by
	hub.freebsd.org (Postfix) with ESMTP id 0455416A4CE for
	<freebsd-ipfw@freebsd.org>; Sun,  7 Nov 2004 19:59:14 +0000 (GMT)
Received: from shellma.zin.lublin.pl (shellma.zin.lublin.pl
	8ACFE43D46 for
	<freebsd-ipfw@freebsd.org>; Sun,  7 Nov 2004 19:59:13 +0000 (GMT)
	(envelope-from pawmal-posting@freebsd.lublin.pl)
Received: by shellma.zin.lublin.pl (Postfix, from userid 1018) id
	86C9F347BA8; Sun,  7 Nov 2004 21:00:18 +0100 (CET)
Date: Sun, 7 Nov 2004 21:00:18 +0100
From: Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
To: freebsd-ipfw@freebsd.org
Message-ID: <20041107200018.GD88583@shellma.zin.lublin.pl>
References: <1099856264.652.276.camel@Mobile1.276NET>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
In-Reply-To: <1099856264.652.276.camel@Mobile1.276NET>
User-Agent: Mutt/1.4.2i
Subject: Re: Listing multiple subnets w/ specific host addresses..
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>;
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
Sender: owner-freebsd-ipfw@freebsd.org
Errors-To: owner-freebsd-ipfw@freebsd.org
X-ELNK-AV: 0
Content-Transfer-Encoding: quoted-printable

On Sun, Nov 07, 2004 at 10:37:44PM +0300, Martes Wigglesworth wrote:

> Does anyone know how to list the following rule?  I am unable to find a
> working example of such a declaration.
>=20
> add log ip from any to \{ 192.168.1.0/24{a,b,c} or
> 192.168.2.0/24{d,e,f,g} \}
>=20
> The backslash works while listing more than one interface at the end of
> rules, however, whenever I use it as above, I get parenthesis errors.=20
> This current format give  the following error on the console:
>=20
> > sudo ipfw add pass log ip from any to \{ 192.168.1.0/24 { 23,24,35,60
> } or 192.168.2.0/24 { 24,25,26,50 }\}
> ipfw: missing ")"

This is a matter of shell. On tcsh:

% ipfw add 31337 count ip from any to \{ 192.168.1.0/24\{7,5,2\} or 192.168=
.2.0/24\{1,6,8,11\} \}
31337 count ip from any to { 192.168.1.0/24{2,5,7} or dst-ip 192.168.2.0/24=
{1,6,8,11} }
% ipfw show 31337
31337          0             0 count ip from any to { 192.168.1.0/24{2,5,7}=
 or dst-ip 192.168.2.0/24{1,6,8,11} }

Still, this `IP or dst-ip IP' on output looks weird...


--=20
Pawe=B3 Ma=B3achowski
_______________________________________________
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"

--=-fVCUVY18GnXB0CJqUcQc--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?1099859047.652.279.camel>