how to get net ranges in definitiosn networks ?

Toto · #1 (**permalink**) 02-06-2004, 02:02 PM

i like to habe a definition like this:

192.168.1.0 to 192.168.5.0

so i can block traffic from this range.

is this possible ?

SecApp · #2 (**permalink**) 02-06-2004, 02:59 PM

Make five Class C definittions going from 1 to 5; then make a Network Group.
Use the Group in your rules...

Toto · #3 (**permalink**) 02-09-2004, 12:47 AM

thats what i know.. i would like a style like unix
hosts.deny / allow

lets say you wanna block that korean or china networks

so i would be nice like that:

name 192.168.0.0- 192.168.5.0

with the networking grouping funltion you´ll lose
some kind of overview , because you must add one entry for
each block.... and that can be realy hard

cyclops · #4 (**permalink**) 02-09-2004, 05:11 AM

beside grouping single net defs you could also describe it with CIDR (supernetting) masks but 1-5 will not work. You could enter 192.168.0.0/21 to describe the range from 192.168.0.0 - 192.168.7.0 for example.

Just an idea
cyclops