You are using a netmask of 24 bits, which will reject everything from the
same subnet that you want to allow. Change the netmask on your reject line
to be 32.
/sbin/ipfwadm -F -i reject -P all -S 192.168.241.5/32 -D 0.0.0.0/0
Hope that helps.
Derek
-----Original Message-----
From: Barton <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Thursday, May 20, 1999 11:23 AM
Subject: [Masq] What am I doing wrong here?
>
>Hello fellow masq friends:
>
>I have a network which is masqueraded using the following
>commands. I would like a particular computer to be excluded
>from being able to see the internet, but when I use this
>command:
>
>/sbin/ipfwadm -F -i reject -P all -S 192.168.240.5/24 -D 0.0.0.0/0
>
>It keeps the entire network from seeing the internet, not just
>the single computer. Any ideas what I am doing wrong?
>
>Thanks for your time,
>
>Barton
>
>
>Here are the commands:
>
># By default, deny all services
>/sbin/ipfwadm -F -p deny
>
># Flush all
>/sbin/ipfwadm -F -f
>/sbin/ipfwadm -I -f
>/sbin/ipfwadm -O -f
>
># Add a masquerading entry for the internal sub-net
>/sbin/ipfwadm -F -a m -S 192.168.240.0/24 -D 0.0.0.0/0
>
># Reject anything from this address
>/sbin/ipfwadm -F -i reject -P all -S 192.168.241.5/24 -D 0.0.0.0/0
>
>
>
>_______________________________________________
>Masq maillist - [EMAIL PROTECTED]
>http://tiffany.indyramp.com/mailman/listinfo/masq
>Admin requests can be handled by web (above) or
[EMAIL PROTECTED]
>
>
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
