[PATCH] ipv4 only rules (test and feedback)

Max Laier max at love2party.net
Fri May 27 10:33:12 PDT 2005


On Thursday 26 May 2005 13:21, Richard Tector wrote:
> Max Laier wrote:
> >With the patch attached you can now do:
> >
> >  ipfw add 100 deny ipv4 from any to any
> >or
> >  ipfw add 100 deny ipv6 from any to any
> >
> >to block IPv4 or IPv6.
>
> How would you, for example, deny all udp traffic over ipv4 but not ipv6?
> Is this possible with ipfw2 as it stands?

  ipfw add 100 deny ipv4 from any to any proto udp

should do the trick, but unfortunately this comes back as:

  100 deny udp from any to any

so I have to fix ipfw show for these cases.  Thanks for bringing this up.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20050527/3831d145/attachment.bin


More information about the freebsd-ipfw mailing list