Re: simple macros?

This is a discussion on Re: simple macros? within the IPFilter forums, part of the System Security and Security Related category; In some email I received from Peter Postma, sie wrote: > On Sun, Dec 05, 2004 at 06:46:02PM +...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-06-2004
Darren Reed
 
Posts: n/a
Default Re: simple macros?

In some email I received from Peter Postma, sie wrote:
> On Sun, Dec 05, 2004 at 06:46:02PM +0100, uhel wrote:
> > Hi,
> >
> > i've read that IPF 4.1.x supports simple macros but i've found no
> > example. I updated my NetBSD box to 2.0 which has IPF 4.1.3 but it
> > has an old manpage without macros..
> > Can anyone give me one or two examples howto use the marco thing?
> >

>
> Here are a few examples:
>
> ext_if="ex0";
> lo_if="lo0";
> tcp_flags="S/SA";
> tcp_services="(22, 80, 443)";
> private_nets="(192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8)";


You can also nest them...e.g.

net10="10.0.0.0/8";
private_nets="(192.168.0.0/16, 172.16.0.0/12, $net10)";

or....
ipf -nvf -
net10="10.0.0.0/8";
private_nets="(192.168.0.0/16, 172.16.0.0/12, $net10)";
pass in from $private_nets to any
^D
pass in from 192.168.0.0/16 to any
pass in from 172.16.0.0/12 to any
pass in from 10.0.0.0/8 to any

Darren
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:39 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0