[ previous ] [ next ] [ threads ]
 
 From:  "James W. McKeand" <james at mckeand dot biz>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] Block IP Range
 Date:  Tue, 25 Jan 2005 09:43:58 -0500
Gurmeet Bedi wrote:
> Hi,
> Is there a easy way in monowall to block range of IP address (i.e.
> 10.10.10.10-39 ) from accessing the Internet. I can create
individual
> rules on LAN int. but looking for more efficient way to achieve
this.
> 
> G

You could create an alias for a network. But the range you wish to
block would need to be included in a subnet. Something like
10.10.10.0/27 would be 10.10.10.1-30 and 10.10.10.32/27 would be
10.10.10.33-62. You would then create firewall rules to block the
alias (blue fields in firewall and NAT rules can take a alias).

_________________________________
James W. McKeand