ipfw2

[Matthew Seaman]

On Tue, Dec 23, 2003 at 08:51:57AM -0500, Lee Dilkie wrote:

> > I think that it's right:
> > ipfw 1000 add permit all from 192.168.1.1/24{3,5,9} to any
> > but I see follwing:
> > ipfw: bad width ``243''

 
>  192.168.1.1/24{3,5,9} translates to  192.168.1.1/243,  192.168.1.1/245 or
> 192.168.1.1/249.

Uh, at least, not in ipfw2 rulesets it doesn't.  Where it does expand
like that is in csh(1), bash(1), zsh(1) and similar shells (but not
sh(1)):

    % echo 192.168.1.1/24{3,5,9}
    192.168.1.1/243 192.168.1.1/245 192.168.1.1/249

Perhaps the original poster was typing the rules in at the command
prompt?  In which case, simply use a few quote marks to stop the
shell interfering:

    # ipfw add 1000 permit all from '192.168.1.1/24{3,5,9}'

Or load the rules out of a file.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20031223/252080d3/attachment.bin