On Thu, 20 May 1999, Barton wrote:
>
> Hello fellow masq friends:
>
> I have a network which is masqueraded using the following
> commands. I would like a particular computer to be excluded
> from being able to see the internet, but when I use this
> command:
>
> /sbin/ipfwadm -F -i reject -P all -S 192.168.240.5/24 -D 0.0.0.0/0
Of course the /24 mask is for an entire C class , you would like to use
/32 or nothing for a single IP
>
> It keeps the entire network from seeing the internet, not just
> the single computer. Any ideas what I am doing wrong?
>
> Thanks for your time,
>
> Barton
>
>
> Here are the commands:
>
> # By default, deny all services
> /sbin/ipfwadm -F -p deny
>
> # Flush all
> /sbin/ipfwadm -F -f
> /sbin/ipfwadm -I -f
> /sbin/ipfwadm -O -f
>
> # Add a masquerading entry for the internal sub-net
> /sbin/ipfwadm -F -a m -S 192.168.240.0/24 -D 0.0.0.0/0
>
> # Reject anything from this address
> /sbin/ipfwadm -F -i reject -P all -S 192.168.241.5/24 -D 0.0.0.0/0
>
>
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> http://tiffany.indyramp.com/mailman/listinfo/masq
> Admin requests can be handled by web (above) or [EMAIL PROTECTED]
>
Teodor Iacob,
Kappa-NET Administrator ( [EMAIL PROTECTED] )
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]