ipfw question

freebsd_at_tern.ru
Date: 02/06/04

  • Next message: Danilo Castro: "ARP" 
    Date: Fri, 6 Feb 2004 13:17:06 +0300
To: freebsd-security@freebsd.org

    Dear All.

    I want to use 'not' for 2 addresses (for both) in ipfw2 rule.
    The only way that looks like what I need is

    # ipfw add count from IP1 to not IP2,IP3

    But does this rule indeed makes what I want? Does it count all
    packets destined to addresses other then IP2 AND IP3?!

    No other syntax works.
    For example more logically correct
    not IP2 AND not IP3
    or even
    not { IP2 or IP3 }
    are understood by ipfw2

    man does not contain the good description of this

    Can somebody clear this up for me?

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Danilo Castro: "ARP"

    Relevant Pages

    • TCP between two interfaces on same workstation.
      ... I have two interface (IP1 and IP2) on my workstation ... I want to have a TCP socket (which is bound to IP1) ... I want the TCP SYN packet to be sent out of interface ...
      (SunManagers)
    • Re: Trying to allow Telnet to two computers
      ... IP2), and create two different server publishing rules for Telnet, one ... forwarding traffic that arrives at IP1 to the first computer on the internal ...
      (microsoft.public.isaserver)
    • Re: Low distortion HF rcv preamp?
      ... I would expect the IP3 and IP2 to be measured with signals in ... always done at levels way below the intercept points. ... pretty non-linear amplifier that had IP3 and IP2 below its maximum ...
      (rec.radio.amateur.homebrew)
    • Re: [patch 1/1] /proc/$$/ipaddr and per-task networking bits
      ... The patch is useful in this situation. ... Suppose node E has two IPs, IP1 ... Now if one try to visit C from E, one has to to use IP2. ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Javascript newbie - Please Help
      ... BaseURL = 'www.mysite.com:9000'; ... How can I get ip1 and ip2? ... Remove the extra words to reply by e-mail. ...
      (comp.lang.javascript)