Using / notation in tables?
daniel at benzedrine.cx
Tue Nov 29 08:49:12 GMT 2005
On Tue, Nov 29, 2005 at 01:24:04AM -0500, Forrest Aldrich wrote:
> Is it not valid to specify in a file based table:
> using slash notation?
> I looked at the PF page, and it seems ambiguious about whether this is
> valid or not.
# cat file
# pfctl -t foo -Tr -f file
1 table created.
3 addresses added.
# pfctl -t foo -Ts
# pfctl -t foo -vTt 18.104.22.168
1/1 addresses match.
> I'm guessing not, since I just created a GeoIP table (file-based) which
> has slash notation in it, and I'm getting spam hits from one of the
> networks already/still.
Then something else is wrong, either the rule using the table doesn't
match (for some other reason than the table not matching), or another
rule is the last matching rule for that connection. Either way, the CIDR
notation in the table is not the problem.
More information about the freebsd-pf