Snort mailing list archives
Re: Maybe a bit OT...
From: John Sage <jsage () finchhaven com>
Date: Sat, 23 Feb 2002 04:02:37 -0800
Craig: I think you want /16, if you want the whole block: Address: 4.41.0.0 00000100.00101001 .00000000.00000000 Netmask: 255.255.0.0 == 16 11111111.11111111 .00000000.00000000 => Network: 4.41.0.0/16 00000100.00101001 .00000000.00000000 (Class A) Broadcast: 4.41.255.255 00000100.00101001 .11111111.11111111 HostMin: 4.41.0.1 00000100.00101001 .00000000.00000001 HostMax: 4.41.255.254 00000100.00101001 .11111111.11111110 Hosts/Net: 65534 (Cool tool tip: ipcalc @ http://jodies.cx/ipcalc.pl ) On Sat, Feb 23, 2002 at 03:50:51AM -0600, J. Craig Woods wrote:
If I want to filter out all packets coming from any machine in the 4.41.x.x subnet (where x can be any value), would the correct CIDR be 4.41.0.0/12? I am writing an ipchains rule that does not seem to get the job done. The rule: $IPCHAINS -A input -p tcp -s 4.41.0.0/12 -d $OUTERNET 80 -j DENY
What about this is *not* working? The netblock range, or something else? - John -- Most people don't type their own logfiles; but, what do I care? _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Maybe a bit OT... J. Craig Woods (Feb 23)
- Re: Maybe a bit OT... John Sage (Feb 23)
- Re: Maybe a bit OT... J. Craig Woods (Feb 23)
- Re: Maybe a bit OT... John Sage (Feb 23)