Date: Fri, 31 Aug 2001 12:20:42 +0300 From: Ruslan Ermilov <ru@FreeBSD.ORG> To: David Hill <david@phobia.ms> Cc: current@FreeBSD.ORG Subject: Re: ipfw syntax - should this error? Message-ID: <20010831122042.C32037@sunbay.com> In-Reply-To: <000901c131b4$3fbe6080$0201a8c0@hill.hom>; from david@phobia.ms on Thu, Aug 30, 2001 at 08:31:16PM -0400 References: <000901c131b4$3fbe6080$0201a8c0@hill.hom>
next in thread | previous in thread | raw e-mail | index | archive | help
This is the documented behavior. : With the TCP and UDP protocols, optional ports may be specified : as: : : {port|port-port|port:mask}[,port[,...]] : : The `-' notation specifies a range of ports (including bound- : aries). : : The `:' notation specifies a port and a mask, a match is declared : if the port number in the packet matches the one in the rule, : limited to the bits which are set in the mask. : : Service names (from /etc/services) may be used instead of numeric : port values. A range may only be specified as the first value, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ : and the length of the port list is limited to IP_FW_MAX_PORTS : ports (as defined in /usr/src/sys/netinet/ip_fw.h). On Thu, Aug 30, 2001 at 08:31:16PM -0400, David Hill wrote: > The following ipfw commands produce an error. > > Could we make this work: > ipfw add allow udp from any to any lowport,higherport1-higherport2 > Instead of > ipfw add allow udp from any to any highport1-highport2,lowpot > > Could we make this work: > ipfw add allow udp from any to any range1-range2, range3-range4 > Instead of having to do > ipfw add allow udp from any to any range1-range2 > ipfw add allow udp from any to any range3-range4 > > fog# uname -a > FreeBSD fog.hill.hom 4.4-RC FreeBSD 4.4-RC #0: Thu Aug 30 15:02:13 EDT 2001 > david@fog:/usr/src/sys/compile/FOG i386 > > Thanks > David -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010831122042.C32037>