Antwort: Re: Antwort: Re: [flow-tools] -f -F Support on flow-receive and flow-capture

Mark Fullmer maf@eng.oar.net
Thu, 12 Dec 2002 15:39:23 -0500


filter-primitive stuff
  type ip-address-prefix
  deny 217.9.43.0/27
  default permit

# this would be from OR to
filter-definition drop1
  match ip-source-address stuff
  or
  match ip-destination-address stuff

# "" from AND to
filter-definition drop2
  match ip-source-address stuff
  match ip-destination-address stuff

mark

On Mon, Dec 09, 2002 at 07:42:25PM +0100, Ahmet.Balamir@berlikomm.net wrote:
> 
> Hi Mark .
> 
> Thanks.
> 
> The problem i have is the following , i would like to deny or permit
> certain Flows based on IP Address/subnet.
> 
> Could you please describe the syntax for it.
> 
> I would like to filter the fraffic from and to the address-block
> 217.9.43.0/27
> 
> Is it possible ?
> 
> Thanks
> 
> Ahmet
> 
> 
> 
> 
> 
> 
> 
>  ________________________________________________________________________
> BerliKomm Telekommunikationsgesellschaft mbH
> 
>                     Ahmet Balamir
> 
> 
>                     Phone:         +49 30 8188 9821
> Ludwig-Erhard-Haus       Fax:
> Fasanenstraße 85         CellPhone:      +49 163 818 9821
> 10623 Berlin             eMail:          Ahmed.Balamir@berlikomm.net
> Germany             WWW:           http://www.berlikomm.net
> ________________________________________________________________________
> 
> 
> _______________________________________________
> flow-tools@splintered.net
> http://www.splintered.net/sw/flow-tools