IP FILTER and network address

Hi all, i want to have these two rules in the ipf.rules file pass in quick on $oif proto tcp from 217.83.122.17/8 to $myip port = 22 flags S keep state pass in quick on $oif proto tcp from 217.83.89.61/8 to $myip port = 22 flags S keep state where $iof is my interface. Executing the config

Re: IP FILTER and network address

Tun Eler wrote: Hi all, i want to have these two rules in the ipf.rules file pass in quick on $oif proto tcp from 217.83.122.17/8 to $myip port = 22 flags S keep state pass in quick on $oif proto tcp from 217.83.89.61/8 to $myip port = 22 flags S keep state where $iof is my interface.

Re: IP FILTER and network address

Appending your IP with /8 ends you up with two rules that essentially look like this (AFAIK): pass in quick on $oif proto tcp from 217.0.0.0/8 to $myip port = 22 flags S keep state Oh, off course. I was applying the rule in the wrong direction, from the right to the left. Silly :-)

Re: IP FILTER and network address

Tun Eler wrote: Appending your IP with /8 ends you up with two rules that essentially look like this (AFAIK): pass in quick on $oif proto tcp from 217.0.0.0/8 to $myip port = 22 flags S keep state Oh, off course. I was applying the rule in the wrong direction, from the right to the