Opps. "One" mistake in the note below.

It looks like when I run ipchains-restore against a rule like this:

-A input -s 0.0.0.0/0.0.0.0 -d 68.33.8.46/255.255.252.0 6346:6346 -i eth1 -p 6 -y -m 5 

The rule as listed by ipchains -L -n is:

target     prot opt     source                destination           ports
-          tcp  -y----  0.0.0.0/0             68.33.8.0/22          * ->   6699  

So, part of my ip number is missing, too, in the firewall.

I guess I don't understand netmasks, but, why, if the end of the number is
being chopped off due to the netmask, do they assign this number (68.33.8.46) ?

Joel

On Fri, Nov 29, 2002 at 07:38:55PM -0500, Joel Hammer wrote:
> BACKGROUND:
> I am on comcast, and get dynamically assigned ip numbers now.
> This is a pain, since, as far as I can tell, comcast is not using a standard
> dhcpd server, and they don't support "third party" software.
> My dhcpcd client can't tell when the ip number is changed, so, I run a
> script whenever my connection gets bad, and so far this has been working.
> However, I have to fool around with the firewall rules, too.
> I want to automate this process, so....
> 
> dhcpcd returns the information from the server whenever it runs. Here is my
> current information:
> 
> IPADDR=68.33.8.46
> NETMASK=255.255.252.0 
> NETWORK=68.33.8.0
> BROADCAST=68.33.11.255
> GATEWAY=68.33.8.1
> HOSTNAME=
> DOMAIN=towson01.md.comcast.net
> DNS=68.34.76.6
> DHCPSIADDR=172.30.10.34
> DHCPSHADDR=00:02:FC:80:E0:A8
> DHCPSNAME=
> LEASETIME=604800
> RENEWALTIME=302400
> REBINDTIME=529200
> 
> I just insert this in as a dot file and let my scripts run. Works fine.
> 
> When the firewall is built, with ipchains-restore, I get this ip/mask
> pair in the firewall (as shown by ipchains -L -n) for my local ip name
> and it works:
> 
> 68.33.8.46/255.255.252.0
> 
> However, when I run ipchains-save, the ip/netmask pair becomes:
> 
> 68.33.8.0/255.255.252.0
> 
> This doesn't look so hot. That is, my computer ip doesn't seem so unique all
> of a sudden. What am I missing? Is this a bug in ipchains-save?
> 
> Thanks,
> Joel
> 
> 
> 
> 
> 
> _______________________________________________
> Linux-users mailing list
> [EMAIL PROTECTED]
> Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
_______________________________________________
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users

Reply via email to