Matching rules on ip4/ip6 with udp/tcp

Dries Michiels driesm.michiels at gmail.com
Wed Jun 6 17:36:08 UTC 2018


Dear Mailing List,

 

Is there are way to match packets specifying both network generation ip4 or
ip6 together with the protocol such as tcp or udp?

 

Currently the following rules are possible (examples):

ipfw add 1 allow udp from any to me 22 in recv em0

ipfw add 1 allow ip4 from any to me 22 in recv em0

 

The following rule is not possible (example):

ipfw add 1 allow ip4 udp from any to me 22 in recv em0

 

Is there a workaround for this or some reason why this hasn't been
implemented? 

Or do I simply not have the rule syntax right.

 

Regards,

Dries



More information about the freebsd-ipfw mailing list