> But you might look at the shorewall 'iprange' command. It accepts a > range as an argument and reduces that range to a list of CIDR addresses. > OK, I take it there is no error in this - I cannot use "10.1.1.0-10.1.1.255", but "10.1.1.0/24" is perfectly legitimate and will be accepted, right? I have no problems with port ranges as they seem to be accepted (either "1,2,3" or "1:3" is fine, it seems).
You may be interested to know that I was "inspired" by that feature in shorewall (which was diabolical in the early versions as it was giving me *all* possible ranges instead of the "shortest" one available) to create a C program doing exactly that (much quicker and less resource-intensive). ------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
