I am configuring RH 8 iptables. I have read several sources, but am still unclear on the impact of a netmask on the source/destination definitions. For example, -s 65.50.0.0/11 would have a hit on what range of incoming packets? If I understand it correctly, which I really do not, the 11 means to mask 11 bits of the ip address. Hence, 11 => 255.224.0.0 ?? (11111111.1110000...) But, how does this translate into the range of ip addresses for which the -s is valid? Will ip address 64.255.0.0 trigger a hit? Will ip address 65.55.1.1 trigger a hit? How do I test the incoming source address against the above rule and determine when a match will occur? Thanks, Mike. -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list