On Sun, Mar 20, 2011 at 04:48:22PM +0100, Martin Kraus wrote:
interface 192.168.0.0/16 { stub; };
That would match all private addresses and change that to stubs, public addresses get over that and matches with later definitions.
Is it possible to use sets in the interface definition? like
interface 10.0.0.0/8+ { stub; };
to match all the possible prefixes from the 10.0.0.0/8 private definition?
No and yes - you cannot specify prefix sets (like in filters), but the prefixes in interface definitions are meant to match subprefixes. interface 10.0.0.0/8 { stub; }; should do that. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."