"Ambrose Li [EDP]" wrote:
> On Fri, Jan 28, 2000 at 05:43:51PM +0800, fooler wrote:
> >
> > what???!!!!
> >
> > in your example:
> >
> > > > > /sbin/ipchains -A input -p TCP -d 127.0.0.1/24 www -j ACCEPT
> > > > > /sbin/ipchains -A input -p TCP -d 209.58.78.10/24 8080 -j ACCEPT
> > > > > /sbin/ipchains -A input -p TCP -d 209.58.78.10/24 www -j ACCEPT
> >
> > take a closer look at 127.0.0.1 and 209.58.78.10, you mask it with /24, you cant
> > do that to a _host_ ip address.
>
> Well, it can actually be done. The host addresses has just been
> changed into network addresses! 8-)
>
yes thats how intelligent newer kernel is :-> but dont confuse others to mask a host
other than /32
fooler.
Received on Fri Jan 28 2000 - 20:21:20 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:50:45 MST