On Fri, 21 May 1999, Stephen Mills wrote:
> For instance : If I want to deny 128.0.100.15 the ability to masquerade for
> browsing the web etc and let the rest of the Class A, 128.0.100/16 allowed
> to, If I do something like :
>
> ipfwadm -F -p d
> ipfwadm -F -a deny -W eth1 -S128.0.100.0/16 -D 0.0.0.0/0
...try:
ipfwadm -F -a deny -W eth1 -S 128.0.100.15/32 -D 0.0.0.0/0
instead.
> ipfwadm -F -a masq -W eth1 -S128.0.100.0/16 -D 0.0.0.0/0
>
> Rule one is ignored and everyone is allowed to browse, maybe I need a head
> check.
That's odd, as rule one should *block* everybody and rule two should
never even be tried.
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
-----------------------------------------------------------------------
In the Lion
the Mighty Lion
the Zebra sleeps tonight...
Dee de-ee-ee-ee-ee de de de we um umma way!
-----------------------------------------------------------------------
12 days until Crusade: the Babylon Project
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
