Arbitrary Netmasks
A message that is not in the archive (sent off-list or not yet received): 20020528132402.GN9802@ns
Quoted 10 lines · Stephen Frost
Quoted 7 lines · * Thomas Heinz ([email protected]) wrote:
Netfilter supports arbitrary netmasks for IP addresses which is more powerful than just those IP/x (0 <= x <= 32) expressions.
For example one could use IP/255.0.255.255 (IP/23.13.42.0 would also work ;-).Are masks that cannot be expressed in the IP/x schmeme (at least not in one rule) used in practise? Are they used at all in firewall rulesets?
I'm pretty confident they're not valid and don't make sense.
But something like IP/255.255.255.192 is still valid and is probably used quite a lot. At least i use it. It's easy to use a $NETMASK variable in scripts for this.
Joost
Hi Joost
Quoted 3 lines · You
But something like IP/255.255.255.192 is still valid and is probably used quite a lot. At least i use it. It's easy to use a $NETMASK variable in scripts for this.
IP/255.255.255.192 == IP/26
Thomas