Re: double NOT in rules is not working as expected

Article View: bit.listserv.openbsd-pf

Article #77

Back to bit.listserv.openbsd-pf Previous Next

#77

From: Bojidara Marinchovska
Date: Fri, 08 Apr 2011 14:38

36 lines
1895 bytes

Hello , thank you

But what I want is to negate list of ( list of tables, list of macros, 
lists of IPs ), i.e

I want

table <a> const {1.2.3.4}
table <b> const {2.3.4.5}
table <c> const {3.4.5.6}
and
block from ! {<a>, <b>, <c>}

I explain in details in the last email


On 04/08/11 16:39, Daniel Hartmeier wrote:
> On Fri, Apr 08, 2011 at 03:42:41PM +0300, Bojidara Marinchovska wrote:
>
>> So the correct question is how to accomplish
>>
>> pass in quick on $netif from {$test1, $test2} to x.x.x.x
>> block in quick on $netif from any to x.x.x.x
>>
>> with only 1 rule ?
> While negating a list never does what you want, negating a table
> does the expected:
>
>    table<test>  const { 1.2.3.4, 2.3.4.5 }
>    block from !<test>  to x.x.x.x
>
> The rule matches any source except 1.2.3.4 and 2.3.4.5.
>
> See http://www.openbsd.org/faq/pf/tables.html for more examples.
>
> Daniel

Technical Details

Message-ID: <4D9F15AA.4080201@bobi.gateit.net>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References:

<4D9EE14F.5010400@bobi.gateit.net> <20110408110426.GA28519@diehard.n-r-g.com> <4D9F02C1.3050901@bobi.gateit.net> <20110408133929.GB8259@insomnia.benzedrine.cx>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,d780e65cf81f4123
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: quintessence@bobi.gateit.net (Bojidara Marinchovska)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: double NOT in rules is not working as expected
Date: 8 Apr 2011 07:38:33 -0700
Organization: None
Lines: 36
Message-ID: <4D9F15AA.4080201@bobi.gateit.net>
References: <4D9EE14F.5010400@bobi.gateit.net> <20110408110426.GA28519@diehard.n-r-g.com> <4D9F02C1.3050901@bobi.gateit.net> <20110408133929.GB8259@insomnia.benzedrine.cx>
NNTP-Posting-Host: [192.168.1.247]
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Date: 8 Apr 2011 14:38:33 GMT

Reply to Parent Message