[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Unexpected Behaviour ? pf "quick" in negated ranges



On Saturday, May 15, 2004, 04:48:26, sk wrote:
>>    block in quick from { 192.168.0.0/24, ! 192.168.11.11 } to any
>> the rule expands o parsing by pfctl to:
>>    block in quick from 192.168.0.0/24 to any
>>    block in quick from ! 192.168.11.11 to any
>> which leads to a highly undesirable result.
>
> um, what's the "highly undesirable result"?

Since the he stated
> This blocks in everything on 192.168 except 192.168.11.11, as
> expected.

I would assume the 'undesirable' part is 192.168.11.11 being blocked.

-- 
rodd_(_at_)_polylogics_(_dot_)_com     "The avalanche has already started, it is too
Rod Dorman              late for the pebbles to vote." ? Ambassador Kosh