Re: Proposal to apply mask to IP address set on rule
Vadim Goncharov <[email protected]> Sat, 24 May 2025 18:53:44 +0300
| Newsgroups | gmane.os.netbsd.devel.network |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 24 May 2025 06:35:53 -0400 Greg Troxel <[email protected]> wrote: > It would be good if someone(tm) surveyed the N firewalls out there (all, > not just ones that run on NetBSD) to see what the broad practice is > about non-zero host bits. My experience is somewhat limited, but I've > never run into errors or warnings. As for FreeBSD 13.4's ipfw, it masks on add and echoes it back: # ipfw add 2345 deny ip from 192.168.64.7/24 to any // [email protected] 02345 deny ip from 192.168.64.0/24 to any // [email protected] -- WBR, @nuclight