On Tue, Jun 06, 2006 at 04:01:09PM +0200, Antoine Jacoutot wrote: > How would you translate the following ? > > => deny ip from any to 145.238.0.0/255.255.0.255
The parser doesn't yet support such netmasks, you'll have to manually
expand to all combinations, using a table makes evaluation faster:
table <foo> const { 145.238.0.0, 145.238.1.0, 145.238.2.0, ...
145.238.254.0, 145.238.255.0 }
block to <foo>
Daniel
