[Bug 267278] ipfw mask addr:mask syntax creates wrong rule

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 22 Oct 2022 21:15:08 UTC

            Bug ID: 267278
           Summary: ipfw mask addr:mask syntax creates wrong rule
           Product: Base System
           Version: 13.1-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: igor.polovykh@gmail.com

man ipfw

             A host or subnet address specified in one of the following ways:


                     Matches all addresses with base addr (specified as an IP
                     address, a network number, or a hostname) and the mask of
                     mask, specified as a dotted quad.  As an example,
            or will match
                     1.*.3.*.  This form is advised only for non-contiguous
                     masks.  It is better to resort to the addr/masklen format
                     for contiguous masks, which is more compact and less er-

I tried to set rule to block many broadcasts from several subnets
ipfw add deny ip from any to

but when I look at created rules table with 'ipfw show' I see:
03300     0       0 deny ip from any to

This is not I expected and manual page says about it.

I expected:
03300     0       0 deny ip from any to

Perhaps I don't understand something.

You are receiving this mail because:
You are the assignee for the bug.