On Jul 30, 2006, at 3:50 AM, Gustavo Rios wrote:

Hey folks,

i am structuring my first firewall server. I am having hard times with
the following building a tables that holds every IPv4 address but
excludes a given range.

My initial idea was:

table <xxx> { 0/0 !x.b.c/24 }


But it is not acceptable.

How would you handle that?

By default, any rule will match 0/0 by just using the "any" or "all" keywords. Think about it.

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net

Reply via email to