Re: double NOT in rules is not working as expected
Bojidara Marinchovska <[email protected]> Fri, 08 Apr 2011 17:03:22 +0300
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <[email protected]> |
Hello , thank you
But what I want is to negate list of ( list of tables, list of macros,
lists of IPs ), i.e
I want
table <a> const {1.2.3.4}
table <b> const {2.3.4.5}
table <c> const {3.4.5.6}
and
block from ! {<a>, <b>, <c>}
I explain in details in the last email
On 04/08/11 16:39, Daniel Hartmeier wrote:
> On Fri, Apr 08, 2011 at 03:42:41PM +0300, Bojidara Marinchovska wrote:
>
>> So the correct question is how to accomplish
>>
>> pass in quick on $netif from {$test1, $test2} to x.x.x.x
>> block in quick on $netif from any to x.x.x.x
>>
>> with only 1 rule ?
> While negating a list never does what you want, negating a table
> does the expected:
>
> table<test> const { 1.2.3.4, 2.3.4.5 }
> block from !<test> to x.x.x.x
>
> The rule matches any source except 1.2.3.4 and 2.3.4.5.
>
> See http://www.openbsd.org/faq/pf/tables.html for more examples.
>
> Daniel