Challenge: subnet wildcard or range

[Craig]

Hello,

Lets say you have different sites 1, 2, and 3:
10.0.1.0/24
10.0.2.0/24
10.0.3.0/24

Now you want to allow certain traffic to particular IPs on those sites.
10.0.1.11/32
10.0.2.11/32
10.0.3.11/32

Couldn't you specify a range or a wildcard on iptables like so:

wildcard
10.0.*.11/32

range
10.0.1-3.11/32
10.0.1.11-10.0.3.11

Please consider that the last octet must be equal to 11.

Regards.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Neal Murphy]

Post by Craig
Hello,
10.0.1.0/24
10.0.2.0/24
10.0.3.0/24
Now you want to allow certain traffic to particular IPs on those sites.
10.0.1.11/32
10.0.2.11/32
10.0.3.11/32
wildcard
10.0.*.11/32
range
10.0.1-3.11/32
10.0.1.11-10.0.3.11
Please consider that the last octet must be equal to 11.

... -d 10.0.0.11/255.255.0.255 ...

and

... -s 10.0.0.11/255.255.0.255 ...

might do the trick. If not, you'll probably have to use the u32 match feature
(-m u32 --help).
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html