Re: how to aggregate rules using ipfw2 ?

2003-03-31 Thread Simon L. Nielsen 
On 2003.03.30 20:18:53 +0600, Ilia E. Chipitsine wrote:
 how can I aggregate rules ...
 
 ipfw add allow ip from any to 192.168.0.0/16
 ipfw add allow ip from any to 10.0.0.0/8
 
 ... into the single rule, probably using { .. or .. } syntax?
 I read man page, tried few combination, but them don't work for me.

ipfw add allow ip from any to { 192.168.0.0/16 or 10.0.0.0/8 }

should do the trick.

-- 
Simon L. Nielsen


pgp0.pgp
Description: PGP signature

Re: how to aggregate rules using ipfw2 ?

2003-03-30 Thread Markie 
Hi!

I remember having difficulty getting this to work when I first got IPFW2,
turns out it wouldn't accept it because there _has_ to be a space between
the { and }.

For example...

ipfw add allow ip from any to { 192.168.0.0/16 or 10.0.0.0/8 }

not

ipfw add allow ip from any to {192.168.0.0/16 or 10.0.0.0/8}

Markie

- Original Message -
From: Ilia E. Chipitsine [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, March 30, 2003 3:18 PM
Subject: how to aggregate rules using ipfw2 ?


 Dear Sirs,

 how can I aggregate rules ...

 ipfw add allow ip from any to 192.168.0.0/16
 ipfw add allow ip from any to 10.0.0.0/8

 ... into the single rule, probably using { .. or .. } syntax?
 I read man page, tried few combination, but them don't work for me.

 Cheers,
 Ilia Chipitsine

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: how to aggregate rules using ipfw2 ? Follow-up, Why Aggregate?

2003-03-30 Thread Joe Sotham 

Markie said:

snip
 ipfw add allow ip from any to { 192.168.0.0/16 or 10.0.0.0/8 }

Why aggregate?  Is it more efficient?

-- 
Joe Sotham

If the only prayer you say in your entire life is Thank You,
that will suffice.
- Meister Eckhart
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: how to aggregate rules using ipfw2 ? Follow-up, Why Aggregate?

2003-03-30 Thread Markie 
More efficient in the way of typing (less of it) :) and I find it easier to
read. That's just my personal opinion though.
Can't say whether there's any speed improvement though, because I just don't
know.

Markie

- Original Message -
From: Joe Sotham [EMAIL PROTECTED]
To: Markie [EMAIL PROTECTED];
[EMAIL PROTECTED]
Cc: @
Sent: Sunday, March 30, 2003 5:55 PM
Subject: Re: how to aggregate rules using ipfw2 ? Follow-up, Why Aggregate?



 Markie said:

 snip
  ipfw add allow ip from any to { 192.168.0.0/16 or 10.0.0.0/8 }

 Why aggregate?  Is it more efficient?

 --
 Joe Sotham
 
 If the only prayer you say in your entire life is Thank You,
 that will suffice.
 - Meister Eckhart


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

how to aggregate rules using ipfw2 ?

2003-03-30 Thread Ilia E. Chipitsine 
Dear Sirs,

how can I aggregate rules ...

ipfw add allow ip from any to 192.168.0.0/16
ipfw add allow ip from any to 10.0.0.0/8

... into the single rule, probably using { .. or .. } syntax?
I read man page, tried few combination, but them don't work for me.

Cheers,
Ilia Chipitsine

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]