172.16.0.0/21 554 match bad netblock 172.16.0.0/21 172.16.8.0/21 554 match bad netblock 172.16.8.0/21 172.16.0.0/16 554 match bad netblock 172.16.0.0/16 172.17.1.1 554 match bad naked address 172.16.1.3/21 whatever 172.16.1.3/33 whatever 172.999.0.0/21 whatever 172.16.1.999 whatever 172.16.1.4 if 1.2.0.0/16 if 1.2.3.4/30 1.2.3.3 1.2.3.3 can't happen 1.2.3.4 1.2.3.4 can happen 1.2.3.5 1.2.3.5 can happen 1.2.3.6 1.2.3.6 can happen 1.2.3.7 1.2.3.7 can happen 1.2.3.8 1.2.3.8 can't happen endif endif if !1.2.3.4/30 1.2.3.3 1.2.3.3 can happen 1.2.3.8 1.2.3.8 can happen endif if ::f4/126 ::f3 ::f3 can't happen ::f4 ::f4 can happen ::f5 ::f5 can happen ::f6 ::f6 can happen ::f7 ::f7 can happen ::f8 ::f8 can't happen endif if !::f4/126 ::f3 ::f3 can happen ::f8 ::f8 can happen endif 2001:240:5c7:0:2d0:b7ff:fe88:2ca7 match 2001:240:5c7:0:2d0:b7ff:fe88:2ca7 2001:240:5c7::/64 match netblock 2001:240:5c7::/64 1.0.0.0/0 match 0.0.0.0/0 ! ! 0.0.0.0/0 match 0.0.0.0/0 1::/0 match ::/0 ::/0 match ::/0 [1234 can't happen [1234]junk can't happen 172.16.1.3/3x can't happen endif endif if 1:2::3:4 if 1:2::3:5 if ! !