On Sat, 31 Jan 2004, Tom Eastep wrote:
> On Saturday 31 January 2004 10:15 am, Salvatore wrote:
> > How can I set a rule to DROP every IP that end with a particular numer
?
> >
> > i.e. *.*.*.20, *.*.*.70, *.*.*.152 etc..
> >
> > It''s a my particular setting...
> >
> > Is it possible ?
>
> No -- not desirable either.
>
Hmmm - I stand corrected.
DROP net:0.0.0.20/0.0.0.255 fw all
might drop all traffic from the net to the firewall from IP addresses
ending in 20 (and if it doesn''t work, I won''t be suprised).
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net