Listing multiple subnets w/ specific host addresses..

asym asym at rfnj.org
Sun Nov 7 12:08:17 PST 2004


At 14:37 11/7/2004, Martes Wigglesworth wrote:
>Does anyone know how to list the following rule?  I am unable to find a
>working example of such a declaration.
>
>add log ip from any to \{ 192.168.1.0/24{a,b,c} or
>192.168.2.0/24{d,e,f,g} \}
>
>The backslash works while listing more than one interface at the end of
>rules, however, whenever I use it as above, I get parenthesis errors.
>This current format give  the following error on the console:
>
> > sudo ipfw add pass log ip from any to \{ 192.168.1.0/24 { 23,24,35,60
>} or 192.168.2.0/24 { 24,25,26,50 }\}
>ipfw: missing ")"

ipfw add count log ip from any to 192.168.1.0/24\{23,24,35,60\}
ipfw add count log ip from any to 192.168.2.0/24\{24,25,26,50\}

I do not believe you can specify both subnets on one line as you're trying 
to do with the brackets.

Note the lack of spaces in the commands I have shown vs. the spaces in your 
own.




More information about the freebsd-ipfw mailing list