Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
Re: ipfw.config - how to block ip ranges
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ipfw.config - how to block ip ranges




On Oct 21, 2007, at 2:08 PM, Cameron Knowlton wrote:


when trying:

add deny log tcp from 75.119.0.0 - 75.119.95.255 to any dst-port 25 in

or

add deny log tcp from 75.119.0.0-75.119.95.255 to any dst-port 25 in

Does not seem to work.

Correct, because neither one of those follows the example of using a range you yourself already provided. Re-read the example of a range you provided above. See how you specified a range for 83.0.0.0 to 82.255.255.255? That used a CIDR block. Additionally you can use a netmask. See the docs.


Note, that since the above range you're trying to deny isn't expressible using a single netmask. That leads me to question if indeed that's really the range you wanted since you're not describing a network anyway. If indeed it is the range you wanted, break it down into two (or more) CIDR blocks according to the networks you're trying to represent.


Good call, Dan.

Steve at al, here's a handy little CIDR calculator, I've used this a lot for configuring Postfix blocks:

http://www.dnsstuff.com/tools/cidr.ch

There's also `whatmask`. There's even a Cocoa and cli build for OS X.

-dhan

------------------------------------------------------------------------
Dan Shoop <email@hidden>
Tactical Operations Center: 1.866.901.8787 (24x7)
Ph: 714.363.1174
AIM: iWiring



_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >ipfw.config - how to block ip ranges (From: Steve Elman <email@hidden>)
 >Re: ipfw.config - how to block ip ranges (From: Dan Shoop <email@hidden>)
 >Re: ipfw.config - how to block ip ranges (From: Steve Elman <email@hidden>)
 >Re: ipfw.config - how to block ip ranges (From: Dan Shoop <email@hidden>)
 >Re: ipfw.config - how to block ip ranges (From: Cameron Knowlton <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2011 Apple Inc. All rights reserved.