Subject: IPF Configuration
To: NetBSD security list <tech-security@netbsd.org>
From: Richard Ibbotson <richard@sheflug.co.uk>
List: tech-security
Date: 06/27/2004 10:10:48
Hi

Tried sending this one into NetBSD-help the other day.  Not seen=20
anyone reply and so thought this list might be more appropriate.

Looking further into my own IPF configuration I find that I would like=20
to understand some more about the syntax. If I have a rule which says,=20
for example....

block in log quick on ippp0 proto tcp from any to 10.0.0.0/24 port 136 >< 1=
40

where 10.0.0.0/24 is an internal network is it better to write it=20
this way around ? .........

block in log quick on ippp0 proto tcp from any to any port 136 >< 140

Similarly if I were to use some of the IANA address ranges.. is=20
this...

block in log quick on ippp0 from 7.0.0.0/8 to 10.0.0.0/24=20

better than using this..

block in log quick on ippp0 from 7.0.0.0/8 to any

=C2=A0remembering that this is a dial up ISDN firewall box with proxyig
enabled.   I'm a bit confused about this and so any help would be=20
greatly appreciated.=20

Thanks





Richard