IPFilter syntax

[Peter Gillis]

Hi, using ipflter on ux 11.00 system.
Is it possible to specify a range of subnets on one line in the ipf.conf file?
eg...
pass in on lan0 from aaa.bbb.ccc.0/aaa.bbb.eee.0 to aaa.bbb.ccc.48 port = 111
pass in on lan0 from aaa.bbb.fff.0/aaa.bbb.hhh.0 to aaa.bbb.ccc.48 port = 111

Hope someone can help out here. (This stuff gets soooo frustrating)
Regards,
Maria

[Steven E. Protter · Accepted solution]

There are a ton of good examples in here.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B9901-90014/B9901-90014_top.html&con=/hpux/onlinedocs/B9901-90014/00/00/15-con.html&toc=/hpux/onlinedocs/B9901-90014/00/00/15-toc.html&searchterms=example%7cipfilter&queryid=20031013-001535

I was going to look at my config, but the config files seems to be empty. Guess I have some work to do.

SEP

[Peter Gillis]

Thanks Steven for your reply. I have actually been going through that manual, and managed to get totally confused I reckon... anyway with all the egs, I have not been able to find one that shows the syntax for specifying a range of subnets. Has anyone else been able to do this?
Regards,
Maria

[Rgomes]

Hi Maria,

I am also trying to config. IPfilter on my 11i box( DNS server).

You can check this link:
http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0xc72cc4c76f92d611abdb0090277a778c%2C00.html&admit=716493758+1066108031452+28353475

Maybe you'll find something.

Best regards
Richard