Subject: Re: IPF Configuration
To: None <netbsd-help@NetBSD.org>
From: Richard Ibbotson <richard@sheflug.co.uk>
List: netbsd-help
Date: 06/26/2004 16:40:34
Hi

Think I have to ask another question about IPF syntax.

Looking further into my own IPF configuration I find that I would like 
to understand some more about the syntax. If I have a rule which says 
for example....

block in log quick on ippp0 proto tcp from any to 10.0.0.0/24 port 136 >< 140

where 10.0.0.0/24 is an internal network or is it better to write it 
this way around ? .........

block in log quick on ippp0 proto tcp from any to any port 136 >< 140

Similarly if I were to use some of the IANA address ranges.. is 
this...

block in log quick on ippp0 from 7.0.0.0/8 to 10.0.0.0/24 

better than using this..

block in log quick on ippp0 from 7.0.0.0/8 to any

 remembering that this is a dial up ISDN firewall box with proxying 
enabled.

Regards





Richard