[olug] IPCHAINS
Dave Homan
dave_cog at hotmail.com
Fri Oct 19 06:09:36 UTC 2001
Yes tom, this confused me at first too. But the key is to think of an ip
address as a collection of 4 eight bit numbers totalling 32 bits. the /0
(or /1 or /31 or /32...etc) represents which bits are important and which
ones arent.. In this case 0 bits are set aside for the "important" bits, in
affect meaning that any ip address possible (thus a wildcard). The same
affect would have been arrived at had you typed in 1.1.1.1/0 or even
255.255.255.255/0. So say you want to block all ip addresses from the ip
block 66.60.x.y. You would then not care about the x or the value of y so
typically one would put something like
ipchains yadda yadda -s 66.60.0.0/16 yadda yadda, since only the first 16
bits (ie the first two numbers) matter.
Hope this helps.
>except for a couple lines that have 0.0.0.0/0 is that supposed to be an IP
>address ? and if so whats the /0 ? or do I just put that is as it reads ?
>Or is there another firewall that is better or easier ? Thanks for any
>info.
>
>Tom
>
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
>For help contact olug-help at bstc.net - run by ezmlm
>to unsubscribe, send mail to olug-unsubscribe at bstc.net
>or `mail olug-unsubscribe at bstc.net < /dev/null`
>(c)2001 OLUG http://www.olug.org
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
For help contact olug-help at bstc.net - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at bstc.net
or `mail olug-unsubscribe at bstc.net < /dev/null`
(c)2001 OLUG http://www.olug.org
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
More information about the OLUG
mailing list