- wlug - list.wlug.org.nz

RE: Perl spelling rules (was: [wlug] iptables question [OT])
by Lindsay Druett 27 Apr '04

27 Apr '04

HeY yOu FoGoT tO dO tHe SuBjEcT > -----OrIgInAl mEsSaGe----- > From: A. pAgAlTzIs [mailto:pAgAlTzIs(a)gMx.dE] > Sent: Tuesday, 27 April 2004 13:59 > To: wAiKaTo lInUx uSeRs gRoUp > Subject: Re: Perl spelling rules (was: [wlug] iptables question [OT]) > > > * OrIoN(a)CoKe.nEt.nZ <oRiOn(a)cOkE.NeT.Nz> [2004-04-27 03:21]: > > FiLeSyStEmS WhIcH ArE PeDaNtIc aBoUt cAsE ArE StUpId. HuMaNs > > WhIcH ArE PeDaNtIc aBoUt tHe cAsE Of aN AcRoNyM ArE 100 TiMeS > > WoRsE. > > i bEt yOu cArE AbOuT CaSe aS WeLl. > > -- > ReGaRdS, > ArIsToTlE > > "iF YoU CaN'T LaUgH At yOuRsElF, yOu dOn't tAkE LiFe > sErIoUsLy eNoUgH." > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

2 1

ms access 97 to apache/php/mysql
by Stephen Pearce 27 Apr '04

27 Apr '04

Is there an automated way to take an access 97 database and port it to mysql .. and convert the forms for php access using apche? (I have apache/php and mysqld operating on a networked server .. and am now trying to do the port) Thanks Stephen

4 3

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

Well, that address space wasn't featured on the Auckland Peering Exchange, Mmm... > -----Original Message----- > From: pdm1-forwarding > Sent: Tuesday, 27 April 2004 11:43 > To: Waikato Linux Users Group > Subject: Re: [wlug] iptables question > > > Lindsay Druett wrote: > > What ? All of it ? > > > > But someone mentioned that there are bits of it over in Japan. > > Someone else mentioned that it was all over the show. > > That would have been a more recent assignment, I don't think APNIC > > even see Telecom as a big enough player to assign a full /8 block. > > > > They got assigned 222.152/16. I have one of these addresses > on my home DSL > and I can't get to various portions of the internet, can be > quite annoying. > > Philip Murray > Systems Engineer - Open2view.com > webmaster(a)open2view.com > > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

1 0

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

Of course they are, which means getting a /24 block might be a bit easier, and that they stand a chance for a /16 block. > -----Original Message----- > From: Drew Broadley [mailto:drew(a)corrupt.co.nz] > Sent: Tuesday, 27 April 2004 11:44 > To: 'Waikato Linux Users Group' > Subject: RE: [wlug] iptables question > > > > I don't think APNIC even see Telecom as a big enough player > to assign > a > > full /8 block. > > Last I saw they were a medium membership holder. > > Surely they would "care" about that sized customer ? > > - Drew > > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

1 0

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

What ? All of it ? But someone mentioned that there are bits of it over in Japan. Someone else mentioned that it was all over the show. That would have been a more recent assignment, I don't think APNIC even see Telecom as a big enough player to assign a full /8 block. Anyway, not my problem... > -----Original Message----- > From: Drew Broadley [mailto:drew(a)corrupt.co.nz] > Sent: Tuesday, 27 April 2004 11:13 > To: 'Waikato Linux Users Group' > Subject: RE: [wlug] iptables question > > > > Dunno... Who has that one ? > > Who knows, everything under my administrative control was in > > there, so I'm happy with it... > > Xtra's Flatrate 256k Netblock. > > > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

3 3

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

Dunno... Who has that one ? Who knows, everything under my administrative control was in there, so I'm happy with it... > -----Original Message----- > From: Drew Broadley [mailto:drew(a)corrupt.co.nz] > Sent: Tuesday, 27 April 2004 09:50 > To: 'Waikato Linux Users Group' > Subject: RE: [wlug] iptables question > > > > Here you go... > > Auckland Peering Exchnage's peering list would be a good start... > > > > <prefix-list> > > Where is 222/8 ? :) > > - Drew > > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

4 3

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

Yeah, so if you decided to go down the path that Bruce suggested which was to allow only source addresses from within New Zealand networks to do normal port 80 web traffic, then the first place I would look is the BGP prefix lists on the New Zealand's primary peering point, and worry about the rest later if that becomes a problem. As I said, this is a good start... > -----Original Message----- > From: Richard Stevenson [mailto:richard(a)endace.com] > Sent: Tuesday, 27 April 2004 10:09 > To: Waikato Linux Users Group > Subject: RE: [wlug] iptables question > > > On Tue, 27 Apr 2004, Lindsay Druett wrote: > > > Dunno... Who has that one ? > > 222/8 is spread all over APNIC space... KDDI (in Japan) has > 222.0.0.0/12, > if I calculate my bits correctly. > > Cheers > > R > > > Who knows, everything under my administrative control was > in there, so > > I'm happy with it... > > > > > -----Original Message----- > > > From: Drew Broadley [mailto:drew(a)corrupt.co.nz] > > > Sent: Tuesday, 27 April 2004 09:50 > > > To: 'Waikato Linux Users Group' > > > Subject: RE: [wlug] iptables question > > > > > > > > > > Here you go... > > > > Auckland Peering Exchnage's peering list would be a > good start... > > > > > > > > <prefix-list> > > > > > > Where is 222/8 ? :) > > -- > Richard Stevenson > _______________________________________________ > wlug mailing list | wlug(a)list.waikato.ac.nz > Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug > >

1 0

food for installfest thought
by Gavin Denby 26 Apr '04

26 Apr '04

Ok its really nothing to do with the installfest, But here is an interesting article comparing a mandrake and win2k install on a system. All the rules and issues are there, but its a fair view on the install processes of 2 OS's Its a fun read, we all know it of course, but for those that are not forced to do Windows installs, it exposes some of the problems with installing Windows onto a machine. If you have time its worth looking at . Have a nice day. (and no I don't use either of these versions, so I can't discuss the findings.)

1 1

RE: [wlug] iptables question
by Lindsay Druett 26 Apr '04

26 Apr '04

> -----Original Message----- > From: zcat [mailto:zcat(a)wired.net.nz] > Sent: Tuesday, 27 April 2004 08:01 > To: Waikato Linux Users Group > Subject: Re: [wlug] iptables question > > > DrWho? wrote: > > > My idea was to use a callback too hook port 80 and use a > perl script > > to reverse lookup the ip address and look for .nz at the > end and pass > > fail there after. > > PAINFUL!! > > If you wanted it hidden you'd have do blackhole the port by default, > sniff for attempted connections, look up the address, change > firewalling > on the fly.. and you're opening yourself up for a huge self-DoS if > someone spoofs millions of random SYN packets at you. > > I believe there's a list of IP ranges that are allocated within New > Zealand. configure your box to accept those and blackhole everything > else. End of problem. > > Here you go... Auckland Peering Exchnage's peering list would be a good start... ip prefix-list pl100 permit 129.223.96.0/19 le 24 ip prefix-list pl100 permit 130.123.0.0/16 le 24 ip prefix-list pl100 permit 130.195.0.0/16 le 24 ip prefix-list pl100 permit 130.216.0.0/15 le 24 ip prefix-list pl100 permit 131.203.0.0/16 le 24 ip prefix-list pl100 permit 134.128.160.0/22 le 24 ip prefix-list pl100 permit 138.211.0.0/16 le 24 ip prefix-list pl100 permit 138.235.0.0/16 le 24 ip prefix-list pl100 permit 143.96.0.0/16 le 24 ip prefix-list pl100 permit 144.130.192.0/24 ip prefix-list pl100 permit 151.135.0.0/16 le 24 ip prefix-list pl100 permit 152.158.213.0/24 ip prefix-list pl100 permit 152.158.254.0/23 ge 24 le 24 ip prefix-list pl100 permit 153.111.0.0/16 le 24 ip prefix-list pl100 permit 156.59.0.0/16 le 24 ip prefix-list pl100 permit 156.62.0.0/16 le 24 ip prefix-list pl100 permit 161.65.0.0/16 le 24 ip prefix-list pl100 permit 163.7.0.0/16 le 24 ip prefix-list pl100 permit 165.84.0.0/16 le 24 ip prefix-list pl100 permit 165.205.0.0/16 le 24 ip prefix-list pl100 permit 166.65.0.0/16 le 24 ip prefix-list pl100 permit 166.83.0.0/16 le 24 ip prefix-list pl100 permit 170.9.56.0/21 le 24 ip prefix-list pl100 permit 192.5.5.0/24 ip prefix-list pl100 permit 192.54.130.0/24 ip prefix-list pl100 permit 192.88.190.0/24 ip prefix-list pl100 permit 192.94.169.0/24 ip prefix-list pl100 permit 192.100.53.0/24 ip prefix-list pl100 permit 192.105.10.0/24 ip prefix-list pl100 permit 192.107.113.0/24 ip prefix-list pl100 permit 192.107.171.0/24 ip prefix-list pl100 permit 192.107.172.0/24 ip prefix-list pl100 permit 192.122.171.0/24 ip prefix-list pl100 permit 192.122.180.0/24 ip prefix-list pl100 permit 192.146.150.0/24 ip prefix-list pl100 permit 192.148.221.0/24 ip prefix-list pl100 permit 192.150.219.0/24 ip prefix-list pl100 permit 192.156.225.0/24 ip prefix-list pl100 permit 192.173.16.0/21 le 24 ip prefix-list pl100 permit 192.188.185.0/24 ip prefix-list pl100 permit 192.190.108.0/24 ip prefix-list pl100 permit 192.195.12.0/23 le 24 ip prefix-list pl100 permit 192.195.14.0/24 ip prefix-list pl100 permit 192.195.219.0/24 ip prefix-list pl100 permit 192.203.154.0/24 ip prefix-list pl100 permit 192.203.216.0/24 ip prefix-list pl100 permit 192.207.143.0/24 ip prefix-list pl100 permit 192.245.36.0/24 ip prefix-list pl100 permit 198.32.66.0/24 ip prefix-list pl100 permit 198.48.0.0/22 ip prefix-list pl100 permit 199.190.182.0/24 ip prefix-list pl100 permit 199.212.93.0/24 ip prefix-list pl100 permit 202.0.10.0/24 ip prefix-list pl100 permit 202.0.32.0/19 le 24 ip prefix-list pl100 permit 202.0.84.0/24 ip prefix-list pl100 permit 202.0.151.0/24 ip prefix-list pl100 permit 202.2.8.0/21 le 24 ip prefix-list pl100 permit 202.2.96.0/19 le 24 ip prefix-list pl100 permit 202.6.5.0/24 ip prefix-list pl100 permit 202.6.75.0/24 ip prefix-list pl100 permit 202.6.84.0/24 ip prefix-list pl100 permit 202.7.4.0/24 ip prefix-list pl100 permit 202.7.32.0/24 ip prefix-list pl100 permit 202.7.34.0/23 le 24 ip prefix-list pl100 permit 202.7.38.0/24 ip prefix-list pl100 permit 202.8.13.0/24 ip prefix-list pl100 permit 202.8.44.0/22 le 24 ip prefix-list pl100 permit 202.10.80.0/20 le 24 ip prefix-list pl100 permit 202.12.0.0/24 ip prefix-list pl100 permit 202.12.70.0/24 ip prefix-list pl100 permit 202.12.105.0/24 ip prefix-list pl100 permit 202.14.0.0/18 le 24 ip prefix-list pl100 permit 202.14.82.0/24 ip prefix-list pl100 permit 202.14.99.0/24 ip prefix-list pl100 permit 202.14.100.0/24 ip prefix-list pl100 permit 202.14.102.0/24 ip prefix-list pl100 permit 202.14.141.0/24 ip prefix-list pl100 permit 202.14.142.0/24 ip prefix-list pl100 permit 202.14.216.0/23 le 24 ip prefix-list pl100 permit 202.14.252.0/23 le 24 ip prefix-list pl100 permit 202.20.0.0/21 le 24 ip prefix-list pl100 permit 202.20.64.0/23 le 24 ip prefix-list pl100 permit 202.20.92.0/23 le 24 ip prefix-list pl100 permit 202.20.102.0/24 ip prefix-list pl100 permit 202.21.16.0/20 le 24 ip prefix-list pl100 permit 202.21.130.0/24 ip prefix-list pl100 permit 202.21.136.0/23 le 24 ip prefix-list pl100 permit 202.21.157.0/24 ip prefix-list pl100 permit 202.22.16.0/20 le 24 ip prefix-list pl100 permit 202.27.34.0/24 ip prefix-list pl100 permit 202.27.40.0/21 le 24 ip prefix-list pl100 permit 202.27.48.0/21 le 24 ip prefix-list pl100 permit 202.27.56.0/22 le 24 ip prefix-list pl100 permit 202.27.64.0/23 le 24 ip prefix-list pl100 permit 202.27.68.0/24 ip prefix-list pl100 permit 202.27.76.0/24 ip prefix-list pl100 permit 202.27.78.0/23 le 24 ip prefix-list pl100 permit 202.27.81.0/24 ip prefix-list pl100 permit 202.27.83.0/24 ip prefix-list pl100 permit 202.27.85.0/24 ip prefix-list pl100 permit 202.27.88.0/23 le 24 ip prefix-list pl100 permit 202.27.92.0/22 le 24 ip prefix-list pl100 permit 202.27.99.0/24 ip prefix-list pl100 permit 202.27.100.0/22 le 24 ip prefix-list pl100 permit 202.27.110.0/24 ip prefix-list pl100 permit 202.27.140.0/22 le 24 ip prefix-list pl100 permit 202.27.186.0/23 le 24 ip prefix-list pl100 permit 202.27.188.128/25 ip prefix-list pl100 permit 202.27.192.0/21 le 24 ip prefix-list pl100 permit 202.27.200.0/22 le 24 ip prefix-list pl100 permit 202.27.204.0/24 ip prefix-list pl100 permit 202.27.206.0/24 ip prefix-list pl100 permit 202.27.208.0/21 ge 24 le 24 ip prefix-list pl100 permit 202.27.210.0/23 ip prefix-list pl100 permit 202.27.212.0/22 le 23 ip prefix-list pl100 permit 202.27.216.0/22 le 24 ip prefix-list pl100 permit 202.27.222.0/24 ip prefix-list pl100 permit 202.27.234.0/24 ip prefix-list pl100 permit 202.27.236.0/24 ip prefix-list pl100 permit 202.27.247.0/24 ip prefix-list pl100 permit 202.27.250.0/23 le 24 ip prefix-list pl100 permit 202.36.16.0/21 le 24 ip prefix-list pl100 permit 202.36.24.0/22 le 24 ip prefix-list pl100 permit 202.36.33.0/24 ip prefix-list pl100 permit 202.36.34.0/23 le 24 ip prefix-list pl100 permit 202.36.36.0/22 le 24 ip prefix-list pl100 permit 202.36.43.0/24 ip prefix-list pl100 permit 202.36.44.0/23 le 24 ip prefix-list pl100 permit 202.36.46.0/24 ip prefix-list pl100 permit 202.36.60.0/24 ip prefix-list pl100 permit 202.36.70.0/24 ip prefix-list pl100 permit 202.36.75.0/24 ip prefix-list pl100 permit 202.36.76.0/23 le 24 ip prefix-list pl100 permit 202.36.80.0/24 ip prefix-list pl100 permit 202.36.94.0/23 le 24 ip prefix-list pl100 permit 202.36.114.0/24 ip prefix-list pl100 permit 202.36.121.0/24 ip prefix-list pl100 permit 202.36.122.0/23 le 24 ip prefix-list pl100 permit 202.36.137.0/24 ip prefix-list pl100 permit 202.36.141.0/24 ip prefix-list pl100 permit 202.36.147.0/24 ip prefix-list pl100 permit 202.36.148.0/24 ip prefix-list pl100 permit 202.36.154.0/24 ip prefix-list pl100 permit 202.36.162.0/23 le 24 ip prefix-list pl100 permit 202.36.164.0/22 le 24 ip prefix-list pl100 permit 202.36.173.0/24 ip prefix-list pl100 permit 202.36.174.0/24 ip prefix-list pl100 permit 202.36.183.0/24 ip prefix-list pl100 permit 202.36.195.0/24 ip prefix-list pl100 permit 202.36.198.0/23 le 24 ip prefix-list pl100 permit 202.36.202.0/24 ip prefix-list pl100 permit 202.36.204.0/23 le 24 ip prefix-list pl100 permit 202.36.219.0/24 ip prefix-list pl100 permit 202.36.224.0/22 le 24 ip prefix-list pl100 permit 202.36.229.0/24 ip prefix-list pl100 permit 202.36.230.0/23 le 24 ip prefix-list pl100 permit 202.36.232.0/24 ip prefix-list pl100 permit 202.36.235.0/24 ip prefix-list pl100 permit 202.36.244.0/23 le 24 ip prefix-list pl100 permit 202.36.251.0/24 ip prefix-list pl100 permit 202.36.252.0/24 ip prefix-list pl100 permit 202.36.255.0/24 ip prefix-list pl100 permit 202.37.0.0/20 le 24 ip prefix-list pl100 permit 202.37.19.0/24 ip prefix-list pl100 permit 202.37.23.0/24 ip prefix-list pl100 permit 202.37.27.0/24 ip prefix-list pl100 permit 202.37.28.0/24 ip prefix-list pl100 permit 202.37.32.0/21 le 24 ip prefix-list pl100 permit 202.37.52.0/23 le 24 ip prefix-list pl100 permit 202.37.54.0/24 ip prefix-list pl100 permit 202.37.57.0/24 ip prefix-list pl100 permit 202.37.60.0/22 le 24 ip prefix-list pl100 permit 202.37.64.0/23 le 24 ip prefix-list pl100 permit 202.37.68.0/24 ip prefix-list pl100 permit 202.37.70.0/23 le 24 ip prefix-list pl100 permit 202.37.72.0/24 ip prefix-list pl100 permit 202.37.74.0/23 le 24 ip prefix-list pl100 permit 202.37.76.0/22 ge 24 le 24 ip prefix-list pl100 permit 202.37.78.0/23 ip prefix-list pl100 permit 202.37.80.0/22 le 24 ip prefix-list pl100 permit 202.37.85.0/24 ip prefix-list pl100 permit 202.37.86.0/23 le 24 ip prefix-list pl100 permit 202.37.88.0/24 ip prefix-list pl100 permit 202.37.90.0/23 le 24 ip prefix-list pl100 permit 202.37.93.0/24 ip prefix-list pl100 permit 202.37.101.0/24 ip prefix-list pl100 permit 202.37.106.0/23 le 24 ip prefix-list pl100 permit 202.37.112.0/24 ip prefix-list pl100 permit 202.37.114.0/24 ip prefix-list pl100 permit 202.37.117.0/24 ip prefix-list pl100 permit 202.37.118.0/24 ip prefix-list pl100 permit 202.37.120.0/24 ip prefix-list pl100 permit 202.37.124.0/23 le 24 ip prefix-list pl100 permit 202.37.127.0/24 ip prefix-list pl100 permit 202.37.129.0/24 ip prefix-list pl100 permit 202.37.132.0/24 ip prefix-list pl100 permit 202.37.135.0/24 ip prefix-list pl100 permit 202.37.137.0/24 ip prefix-list pl100 permit 202.37.138.0/23 le 24 ip prefix-list pl100 permit 202.37.140.0/22 le 24 ip prefix-list pl100 permit 202.37.144.0/21 le 24 ip prefix-list pl100 permit 202.37.160.0/24 ip prefix-list pl100 permit 202.37.163.0/24 ip prefix-list pl100 permit 202.37.167.0/24 ip prefix-list pl100 permit 202.37.168.0/24 ip prefix-list pl100 permit 202.37.171.0/24 ip prefix-list pl100 permit 202.37.173.0/24 ip prefix-list pl100 permit 202.37.176.0/24 ip prefix-list pl100 permit 202.37.181.0/24 ip prefix-list pl100 permit 202.37.184.0/22 ge 24 le 24 ip prefix-list pl100 permit 202.37.184.0/23 ip prefix-list pl100 permit 202.37.192.0/23 le 24 ip prefix-list pl100 permit 202.37.194.0/24 ip prefix-list pl100 permit 202.37.197.0/24 ip prefix-list pl100 permit 202.37.200.0/22 le 24 ip prefix-list pl100 permit 202.37.218.0/23 le 24 ip prefix-list pl100 permit 202.37.220.0/24 ip prefix-list pl100 permit 202.37.222.0/24 ip prefix-list pl100 permit 202.37.224.0/21 le 24 ip prefix-list pl100 permit 202.37.234.0/24 ip prefix-list pl100 permit 202.37.240.0/23 le 24 ip prefix-list pl100 permit 202.37.248.0/22 le 24 ip prefix-list pl100 permit 202.37.252.0/24 ip prefix-list pl100 permit 202.37.254.0/24 ip prefix-list pl100 permit 202.39.129.0/24 ip prefix-list pl100 permit 202.41.136.0/22 le 24 ip prefix-list pl100 permit 202.41.140.0/24 ip prefix-list pl100 permit 202.45.254.0/24 ip prefix-list pl100 permit 202.46.160.0/19 le 24 ip prefix-list pl100 permit 202.49.0.0/21 le 24 ip prefix-list pl100 permit 202.49.16.0/20 le 24 ip prefix-list pl100 permit 202.49.33.0/24 ip prefix-list pl100 permit 202.49.34.0/23 le 24 ip prefix-list pl100 permit 202.49.46.0/23 le 24 ip prefix-list pl100 permit 202.49.48.0/24 ip prefix-list pl100 permit 202.49.58.0/24 ip prefix-list pl100 permit 202.49.62.0/23 le 24 ip prefix-list pl100 permit 202.49.64.0/21 le 24 ip prefix-list pl100 permit 202.49.72.0/22 le 24 ip prefix-list pl100 permit 202.49.78.0/24 ip prefix-list pl100 permit 202.49.80.0/22 ge 23 le 24 ip prefix-list pl100 permit 202.49.84.0/24 ip prefix-list pl100 permit 202.49.88.0/21 ge 23 le 24 ip prefix-list pl100 permit 202.49.92.0/22 ip prefix-list pl100 permit 202.49.96.0/21 le 24 ip prefix-list pl100 permit 202.49.104.0/24 ip prefix-list pl100 permit 202.49.106.0/24 ip prefix-list pl100 permit 202.49.135.0/24 ip prefix-list pl100 permit 202.49.136.0/23 le 24 ip prefix-list pl100 permit 202.49.140.0/23 le 24 ip prefix-list pl100 permit 202.49.144.0/24 ip prefix-list pl100 permit 202.49.148.0/23 le 24 ip prefix-list pl100 permit 202.49.152.0/21 le 24 ip prefix-list pl100 permit 202.49.164.0/23 le 24 ip prefix-list pl100 permit 202.49.168.0/24 ip prefix-list pl100 permit 202.49.172.0/22 le 24 ip prefix-list pl100 permit 202.49.176.0/23 le 24 ip prefix-list pl100 permit 202.49.178.0/24 ip prefix-list pl100 permit 202.49.180.0/23 le 24 ip prefix-list pl100 permit 202.49.183.0/24 ip prefix-list pl100 permit 202.49.186.0/24 ip prefix-list pl100 permit 202.49.189.0/24 ip prefix-list pl100 permit 202.49.198.0/23 le 24 ip prefix-list pl100 permit 202.49.200.0/22 le 24 ip prefix-list pl100 permit 202.49.206.0/24 ip prefix-list pl100 permit 202.49.208.0/22 le 24 ip prefix-list pl100 permit 202.49.212.0/23 le 24 ip prefix-list pl100 permit 202.49.214.0/24 ip prefix-list pl100 permit 202.49.224.0/20 le 24 ip prefix-list pl100 permit 202.49.240.0/21 ge 22 le 24 ip prefix-list pl100 permit 202.49.250.0/24 ip prefix-list pl100 permit 202.49.252.0/22 le 24 ip prefix-list pl100 permit 202.50.0.0/24 ip prefix-list pl100 permit 202.50.16.0/20 le 24 ip prefix-list pl100 permit 202.50.49.0/24 ip prefix-list pl100 permit 202.50.52.0/22 le 24 ip prefix-list pl100 permit 202.50.57.0/24 ip prefix-list pl100 permit 202.50.60.0/22 le 24 ip prefix-list pl100 permit 202.50.64.0/21 le 24 ip prefix-list pl100 permit 202.50.72.0/23 le 24 ip prefix-list pl100 permit 202.50.84.0/24 ip prefix-list pl100 permit 202.50.95.0/24 ip prefix-list pl100 permit 202.50.102.0/23 ge 24 le 24 ip prefix-list pl100 permit 202.50.104.0/22 le 24 ip prefix-list pl100 permit 202.50.109.0/24 ip prefix-list pl100 permit 202.50.110.0/23 le 24 ip prefix-list pl100 permit 202.50.112.0/24 ip prefix-list pl100 permit 202.50.117.0/24 ip prefix-list pl100 permit 202.50.124.0/22 le 24 ip prefix-list pl100 permit 202.50.129.0/24 ip prefix-list pl100 permit 202.50.137.0/24 ip prefix-list pl100 permit 202.50.139.0/24 ip prefix-list pl100 permit 202.50.143.0/24 ip prefix-list pl100 permit 202.50.164.0/23 le 24 ip prefix-list pl100 permit 202.50.167.0/24 ip prefix-list pl100 permit 202.50.170.0/24 ip prefix-list pl100 permit 202.50.176.0/23 ge 24 le 24 ip prefix-list pl100 permit 202.50.176.0/24 ge 25 le 29 ip prefix-list pl100 permit 202.50.188.0/22 le 24 ip prefix-list pl100 permit 202.50.192.0/19 le 24 ip prefix-list pl100 permit 202.50.240.0/24 ip prefix-list pl100 permit 202.50.244.0/24 ip prefix-list pl100 permit 202.50.252.0/24 ip prefix-list pl100 permit 202.50.255.0/24 ip prefix-list pl100 permit 202.53.176.0/20 le 24 ip prefix-list pl100 permit 202.62.116.0/23 le 29 ip prefix-list pl100 permit 202.65.32.0/19 le 24 ip prefix-list pl100 permit 202.68.94.0/23 le 27 ip prefix-list pl100 permit 202.73.192.0/20 le 24 ip prefix-list pl100 permit 202.74.192.0/20 le 24 ip prefix-list pl100 permit 202.78.128.0/19 le 24 ip prefix-list pl100 permit 202.83.32.0/19 le 24 ip prefix-list pl100 permit 202.86.96.0/21 le 24 ip prefix-list pl100 permit 202.89.32.0/19 le 24 ip prefix-list pl100 permit 202.89.128.0/19 le 24 ip prefix-list pl100 permit 202.124.96.0/20 le 24 ip prefix-list pl100 permit 202.127.8.0/22 le 29 ip prefix-list pl100 permit 202.135.20.0/24 ip prefix-list pl100 permit 202.135.38.0/24 ip prefix-list pl100 permit 202.135.48.0/24 ip prefix-list pl100 permit 202.135.62.0/24 ip prefix-list pl100 permit 202.135.64.0/24 ip prefix-list pl100 permit 202.135.85.0/24 ip prefix-list pl100 permit 202.135.86.0/24 ip prefix-list pl100 permit 202.135.112.0/24 ip prefix-list pl100 permit 202.135.115.0/24 ip prefix-list pl100 permit 202.135.116.0/24 ip prefix-list pl100 permit 202.135.142.0/24 ip prefix-list pl100 permit 202.135.182.0/24 ip prefix-list pl100 permit 202.135.190.0/24 ip prefix-list pl100 permit 202.135.192.0/24 ip prefix-list pl100 permit 202.135.231.0/24 ip prefix-list pl100 permit 202.147.35.128/25 ip prefix-list pl100 permit 202.154.128.0/19 le 24 ip prefix-list pl100 permit 202.175.128.0/20 le 24 ip prefix-list pl100 permit 202.180.64.0/18 le 24 ip prefix-list pl100 permit 202.182.192.0/20 le 24 ip prefix-list pl100 permit 203.21.24.0/21 le 24 ip prefix-list pl100 permit 203.26.179.0/24 ip prefix-list pl100 permit 203.79.64.0/18 le 24 ip prefix-list pl100 permit 203.96.0.0/18 le 24 ip prefix-list pl100 permit 203.96.119.0/24 ip prefix-list pl100 permit 203.96.120.0/23 le 24 ip prefix-list pl100 permit 203.96.123.0/24 ip prefix-list pl100 permit 203.96.126.0/24 ip prefix-list pl100 permit 203.96.128.0/19 le 24 ip prefix-list pl100 permit 203.96.192.0/19 le 24 ip prefix-list pl100 permit 203.97.0.0/16 le 24 ip prefix-list pl100 permit 203.97.44.0/24 ge 25 le 29 ip prefix-list pl100 permit 203.97.66.0/24 ge 25 le 29 ip prefix-list pl100 permit 203.98.0.0/18 le 24 ip prefix-list pl100 permit 203.99.0.0/19 le 24 ip prefix-list pl100 permit 203.99.64.0/21 le 24 ip prefix-list pl100 permit 203.109.128.0/17 le 24 ip prefix-list pl100 permit 203.110.0.0/18 le 24 ip prefix-list pl100 permit 203.114.128.0/19 le 24 ip prefix-list pl100 permit 203.118.128.0/18 le 24 ip prefix-list pl100 permit 203.144.32.0/20 le 24 ip prefix-list pl100 permit 203.152.96.0/19 le 24 ip prefix-list pl100 permit 203.161.39.0/24 ip prefix-list pl100 permit 203.163.68.0/24 ip prefix-list pl100 permit 203.163.70.0/23 ge 24 le 24 ip prefix-list pl100 permit 203.163.86.0/24 ip prefix-list pl100 permit 203.163.98.0/24 ip prefix-list pl100 permit 203.167.128.0/17 le 24 ip prefix-list pl100 permit 203.173.128.0/17 le 24 ip prefix-list pl100 permit 210.48.0.0/17 le 24 ip prefix-list pl100 permit 210.54.0.0/22 le 24 ip prefix-list pl100 permit 210.54.12.0/23 le 24 ip prefix-list pl100 permit 210.54.32.0/21 le 24 ip prefix-list pl100 permit 210.54.56.0/21 le 24 ip prefix-list pl100 permit 210.54.128.0/21 le 24 ip prefix-list pl100 permit 210.54.142.0/23 le 24 ip prefix-list pl100 permit 210.54.148.0/22 le 24 ip prefix-list pl100 permit 210.54.152.0/21 le 24 ip prefix-list pl100 permit 210.54.211.0/24 ip prefix-list pl100 permit 210.54.252.0/24 ip prefix-list pl100 permit 210.55.0.0/25 ip prefix-list pl100 permit 210.55.1.0/25 ip prefix-list pl100 permit 210.55.4.0/23 le 24 ip prefix-list pl100 permit 210.55.7.0/24 ip prefix-list pl100 permit 210.55.8.0/24 ip prefix-list pl100 permit 210.55.10.0/24 ip prefix-list pl100 permit 210.55.12.0/22 le 24 ip prefix-list pl100 permit 210.55.16.0/21 le 24 ip prefix-list pl100 permit 210.55.28.0/22 le 24 ip prefix-list pl100 permit 210.55.72.0/21 le 24 ip prefix-list pl100 permit 210.55.100.0/22 le 24 ip prefix-list pl100 permit 210.55.104.0/22 le 24 ip prefix-list pl100 permit 210.55.108.0/24 ip prefix-list pl100 permit 210.55.110.0/23 le 24 ip prefix-list pl100 permit 210.55.155.0/24 ip prefix-list pl100 permit 210.55.157.0/24 ip prefix-list pl100 permit 210.55.158.0/24 ip prefix-list pl100 permit 210.55.169.0/24 ip prefix-list pl100 permit 210.55.180.128/26 ip prefix-list pl100 permit 210.55.184.0/22 ge 24 le 24 ip prefix-list pl100 permit 210.55.186.0/23 ip prefix-list pl100 permit 210.55.193.64/27 ip prefix-list pl100 permit 210.55.198.0/23 ge 24 le 24 ip prefix-list pl100 permit 210.55.202.0/23 le 24 ip prefix-list pl100 permit 210.55.212.0/22 ge 23 le 23 ip prefix-list pl100 permit 210.55.214.0/23 ge 24 le 24 ip prefix-list pl100 permit 210.55.227.0/24 ip prefix-list pl100 permit 210.55.228.0/24 ip prefix-list pl100 permit 210.55.230.0/24 ip prefix-list pl100 permit 210.55.248.0/21 le 24 ip prefix-list pl100 permit 210.246.0.0/18 le 24 ip prefix-list pl100 permit 218.101.0.0/17 le 24 ip prefix-list pl100 permit 218.101.56.0/24 ge 25 le 29 ip prefix-list pl100 permit 219.88.103.0/24 ip prefix-list pl100 permit 219.88.128.0/20 le 24 ip prefix-list pl100 permit 219.88.224.0/19 ge 20 le 24 ip prefix-list pl100 deny 0.0.0.0/0 le 32 Yeah go on.... Type type

3 2

Firewall script problem
by Gun Caundle 25 Apr '04

25 Apr '04

I am a newbie trying to create a firewall on RH9. I am using a script from the RH9 bible (p507). I am running a section at a time. What I have so far: # (1) Policies (default) iptables _P INPUT DROP iptables -P OUTPUT DROP iptables -P FORWARD DROP # (2) user-defined chain for ACCEPTED TCP packets iptables -N okay iptables -A okay -p TCP --syn -j ACCEPT iptables -A okay -p TCP -m state ESTABLISHED,RELATED -j ACCEPT iptables -A okay -p TCP -j DROP This line is giving me some grief: 'iptables -A okay -p TCP -m state ESTABLISHED,RELATED -j ACCEPT' Because I get this error when I run it. 'firescript: line 23: ESTABLISHED,RELATED: command not found' The author says this line "allows through packets associated with an ESTABLISHED connection (one that has already had traffic pass through the interface) or a RELATED connection (one that is starting a new connection related to an already-established connection) Are there other commands I could use or another line of script that would do the same job? Any help would be appreciated. Gun Caundle

5 8