Matching all protocols in /etc/protocols (1 rule)

Freddie Cash fjwcash at gmail.com
Tue Aug 4 23:18:51 UTC 2009


2009/8/4 Miroslav Chlastak <mira at chlastak.cz>

> Hi all,
>
> it's possible to create one rule to pass (or disable) all traffic (all
> protocols - from /etc/protocols)?
> I know, that I can use "all" keyword. But this keyword "all" mean only
> "tcp, udp, icmp" protocols.
> But there is more then tcp, udp and icmp protocol (gre,esp,ospf,...). If I
> can allow all of this protocols, so at the moment I have to create 134 rules
> (1 rule for 1 protocol from /etc/protocols).
>

If this is for IPFW, just use "ip" or "any".  That will match any IP
packets, regardless of what protocol data is inside the packet.


-- 
Freddie Cash
fjwcash at gmail.com


More information about the freebsd-ipfw mailing list