Subject: IPF Configuration
To: NetBSD security list <email@example.com>
From: Richard Ibbotson <firstname.lastname@example.org>
Date: 06/27/2004 10:10:48
Tried sending this one into NetBSD-help the other day. Not seen=20
anyone reply and so thought this list might be more appropriate.
Looking further into my own IPF configuration I find that I would like=20
to understand some more about the syntax. If I have a rule which says,=20
block in log quick on ippp0 proto tcp from any to 10.0.0.0/24 port 136 >< 1=
where 10.0.0.0/24 is an internal network is it better to write it=20
this way around ? .........
block in log quick on ippp0 proto tcp from any to any port 136 >< 140
Similarly if I were to use some of the IANA address ranges.. is=20
block in log quick on ippp0 from 18.104.22.168/8 to 10.0.0.0/24=20
better than using this..
block in log quick on ippp0 from 22.214.171.124/8 to any
=C2=A0remembering that this is a dial up ISDN firewall box with proxyig
enabled. I'm a bit confused about this and so any help would be=20