Re: (PM) Stupid filtering questions, was: Avalanche! Help!

Doug Ingraham (dpi@rapidnet.com)
Sun, 25 Jan 1998 12:27:54 -0700 (MST)

On Sun, 25 Jan 1998, David Raistrick wrote:

> On Sun, 25 Jan 1998, Doug Ingraham wrote:
>
> > done. The router was congested as well. The following filter solved the
> > problem.
> >
> > add filter e.out
> > set filter e.out 1 permit 192.168.1.32/27
> > set filter e.out 2 permit 192.168.0.10/32
> > set filter e.out 3 permit log
>
> Hmm..i'm sure i will catch hell for asking, but!:)
>
> Having very little time to research on my own, i find it much easier, and
> faster to just ask someone who already knows...
>
> Just what is the /27, and the /32?

It is the way you specify the netmask. The /27 would be equivalent to
255.255.255.224 and the /32 is equivalent to a host route or
255.255.255.255. So the first line above permits a packet with an address
in the range of 192.168.1.32 through 192.168.1.63 and the /32 line would
permit only packets from the specific IP address 102.168.0.10 and no
others. Filters process every line from top to bottom and only stop when
a match is found. The first line will match your assigned address pool
assuming it is assigned 192.168.1.32 with a poolsize of 32 which would be
common for a PM-2. On a a PM-3 you might need two permits to match a
poolsize of 48 when you start the pool at a /27 or /28 boundary.

Specifically, the /num is the number of bits that are set on in a 32 bit
mask starting from the MSB.

Doug Ingraham From the Ferengi Rules of Acquisition.
Rapid City, SD #34 "Peace is good for business."
USA #35 "War is good for business."

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.