On Fri, Dec 30, 2016 at 12:27:13PM -0800, Jerry Scharf wrote: > Hi, > > I did a quick look at the archives and didn't see exactly what I was > trying discussed. > > filter load_default { > if net = [0.0.0.0/0] then accept;
Hi Here is the mistake - you have to use either 'net = 0.0.0.0/0' or 'net ~ [0.0.0.0/0]'. In the first case the net is compared against the default net, in the second case a membership check is computed (whether the net is a member of a prefix set of the default net). Your check is always false because prefixes and a prefix sets are different types of objects. > function is_primary() { > return net = [198.48.100.10/32, 198.48.100.20/32]; > } > > function is_secondary() { > return net = [8.25.217.10/32, 8.25.217.21/32]; > } The same problem here. > function is_tertiary() { > return net ~ [198.48.100.0/24+, 8.25.217.0/24+]; > } While this is correct. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santi...@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."
signature.asc
Description: Digital signature