non-contiguous netmask (255.255.0.255) ?

Doug Monroe doug@planetconnect.com
Wed, 31 Oct 2001 10:08:59 -0500


curious-
taking Mr. Andreasson's script as an example:
  http://people.unix-fu.org:8080/andreasson/iptables-tutorial/rc.firewall.txt
which contains-
  LAN_BCAST_ADRESS="192.168.0.255/32"

is it "legal" to specify a "non-contiguous" netmask like
  LAN_BCAST_ADRESS="192.168.0.255/255.255.0.255"
in order to accomodate multiple class c space (e.g. VLANs)

I've read ref's about this violating some IETF rules, but I'd really like to
be able to add a -single- netfilter rule for all 192.168.x.255 broadcast
addresses vs. adding an entry for -each- one seperately.

Even if it's not "legal"...will it work? :)
Other ideas?

Thanks
Doug Monroe