Re: Anyone familiar with the IP packet filtering rules on IBM i

Can you show me an ipables wildcard statement that works with the IBMi packet filtering on a network IP address range such as: 1.1.*.* ?

I don't believe the iptables wildcarding works. At least from my testing.

The example that was provided by Kevin worked for me though.

Regards,
Richard Schoen
Web: http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx
----------------------------------------------------------------------

message: 2
date: Wed, 15 Jul 2020 14:04:01 -0500
from: Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx>
subject: Re: Anyone familiar with the IP packet filtering rules on IBM
i ?

Use the same format as iptables.

Jim Oberholtzer
Agile Technology Architects

On Jul 15, 2020, at 10:41 AM, Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:

?https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_74/rzajb/rzajbp
df.pdf

Boy, that is pretty sparse, Richard!

I worked with PF extensively on OpenBSD but the syntax here looks different.

I'd try 1.1.* just as a SWAG.

On Wed, Jul 15, 2020 at 9:20 AM Richard Schoen
<richard@xxxxxxxxxxxxxxxxx>
wrote:

Using LODIPFTR I have the IP address packet rules working just fine
and can filter a full ip address like this:

Ex: SRCADDR = 1.1.1.1 or DSTADDR = 1.1.1.1

Is there a way to use some wildcarding to just filter mask on the
first part of the IP address. In this example just the first two
digits. This way I can filter to a particular network rather than
down to the specific IP if the IP address changes:

Desired Filter Ex: SRCADDR = 1.1.0.0 or DSTADDR = 1.1.0.0

I tried this: 1.1.0.0/16 and it doesn't work. Also tried just:
1.1.0.0 and that doesn't work either. Only thing that seems to work
is a specific IP address.

--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021