Re: LocalNetwork question.

Schuyler Erle <[email protected]> Tue, 2 Aug 2005 15:24:28 -0700

Newsgroups	gmane.network.nocat
Message-ID	<[email protected]>

* On  2-Aug-2005 at  3:22PM PDT, Chip Mefford said:
> 
>  Okay, my "regular" folks whine every now and again about nocat. Seeing
> how I don't have an "auth" service set up. in nocat.conf, if I specify
> LocalNetwork 172.24.24.224/27 (on a /26 subnet) would that mean that
> nocat would only trap .224-255 and leave 192-223 alone?
> 
> Meaning, folks with assigned (via dhcp) addresses in x.192/27 would
> just roll on past, and folks in the dynamic pool of 224/27 get
> the splash ?

Unfortunately, that's not how it works. You'd have to stick a custom
rule or two in your initialize.fw to cause the firewall to circumvent
NoCat for that IP range.

SDE