[ previous ] [ next ] [ threads ]
 
 From:  "James W. McKeand" <james at mckeand dot biz>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] set of ports
 Date:  Fri, 20 Jan 2006 08:56:56 -0600
FiL wrote:
> James W. McKeand wrote:
> 
>>  At this time you can only set a range of ports. If the ports in
>>  question is a continuous range (80-88) this would work. But, this
>>  will not work if you need 25, 80, 443, etc.
>> 
>>  I believe it is on the wish list to have groups of ports.
> I see. Unfortunately I need non-continuous set of posts (22, 80,
> 443...) Didn't see that in the wishlist. That's why I thought it is
> already implemented, but I'm just missing it.

I stand corrected. There is a wishlist item for groups of host/subnets
on aliases. I should of checked the wishlist before posting... ;-)
 
>>  You can set firewall rules to allow or block traffic to a subnet
>>  (the dropdown says Network). You can also set an alias to a subnet
>>  (the dropdown says Network).
> Know that, but I was talking about 192.168.22.0/24{10,15,32,67}
> feature of ipfw2. Again, non-continuous set of IP's within one subnet.
> This is not that important for me, but it would be nice to have it as
> long as underlying layer (ipfw) has it.

I will have to defer to the list for this. I am not sure how this would
be implemented.

_________________________________
James W. McKeand