|
On Jul 15, 2020, at 10:41 AM, Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:
?https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_74/rzajb/rzajbp
df.pdf
Boy, that is pretty sparse, Richard!
I worked with PF extensively on OpenBSD but the syntax here looks different.
I'd try 1.1.* just as a SWAG.
On Wed, Jul 15, 2020 at 9:20 AM Richard Schoen
<richard@xxxxxxxxxxxxxxxxx>
wrote:
Using LODIPFTR I have the IP address packet rules working just fine
and can filter a full ip address like this:
Ex: SRCADDR = 1.1.1.1 or DSTADDR = 1.1.1.1
Is there a way to use some wildcarding to just filter mask on the
first part of the IP address. In this example just the first two
digits. This way I can filter to a particular network rather than
down to the specific IP if the IP address changes:
Desired Filter Ex: SRCADDR = 1.1.0.0 or DSTADDR = 1.1.0.0
I tried this: 1.1.0.0/16 and it doesn't work. Also tried just:
1.1.0.0 and that doesn't work either. Only thing that seems to work
is a specific IP address.
--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.