Re: pf: Efficiently specifying discontinuous IPv6 ranges

2018-05-11 Thread Matthew Seaman
On 11/05/2018 16:28, Mark Raynsford via freebsd-net wrote: good_0 = 2a00:1450:400c:: - 2a00:1450:400c::1000 good_1 = 2a04:4e42:600::200 - 2a04:4e42:600::400 good_2 = 2001:1900:2254:206a::50:0 good_3 = 2001:19f0:5:61d:f000:: good_4 = 2001:4998:58:1836::10 You could also handle this using an addr

Re: pf: Efficiently specifying discontinuous IPv6 ranges

2018-05-11 Thread Rodney W. Grimes
> Hello. > > Let's say I have a host and I want to restrict access to that host to a > discontinuous range of IPv6 addresses. For example, let's say I want to > allow access to a host from addresses [2a00:1450:400c::, > 2a00:1450:400c::1000], [2a04:4e42:600::200, 2a04:4e42:600::400], and > individ

pf: Efficiently specifying discontinuous IPv6 ranges

2018-05-11 Thread Mark Raynsford via freebsd-net
Hello. Let's say I have a host and I want to restrict access to that host to a discontinuous range of IPv6 addresses. For example, let's say I want to allow access to a host from addresses [2a00:1450:400c::, 2a00:1450:400c::1000], [2a04:4e42:600::200, 2a04:4e42:600::400], and individually 2001:190