Subject: IPF Configuration
To: NetBSD security list <firstname.lastname@example.org>
From: Richard Ibbotson <email@example.com>
Date: 06/27/2004 10:10:48
Tried sending this one into NetBSD-help the other day. Not seen=20
anyone reply and so thought this list might be more appropriate.
Looking further into my own IPF configuration I find that I would like=20
to understand some more about the syntax. If I have a rule which says,=20
block in log quick on ippp0 proto tcp from any to 10.0.0.0/24 port 136 >< 1=
where 10.0.0.0/24 is an internal network is it better to write it=20
this way around ? .........
block in log quick on ippp0 proto tcp from any to any port 136 >< 140
Similarly if I were to use some of the IANA address ranges.. is=20
block in log quick on ippp0 from 184.108.40.206/8 to 10.0.0.0/24=20
better than using this..
block in log quick on ippp0 from 220.127.116.11/8 to any
=C2=A0remembering that this is a dial up ISDN firewall box with proxyig
enabled. I'm a bit confused about this and so any help would be=20