From owner-freebsd-ipfw@FreeBSD.ORG Tue Aug 4 23:18:50 2009 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E0B8C1065672 for ; Tue, 4 Aug 2009 23:18:50 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: from mail-gx0-f217.google.com (mail-gx0-f217.google.com [209.85.217.217]) by mx1.freebsd.org (Postfix) with ESMTP id 9A4F58FC08 for ; Tue, 4 Aug 2009 23:18:50 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: by gxk17 with SMTP id 17so6658822gxk.19 for ; Tue, 04 Aug 2009 16:18:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=12qr8YsRVwlbB56wudMluzrVf5WOMVTTv0G/uSeqC4E=; b=JB8CO6d8qqhI4mp2ZKEs24lQNoonPMcJW33GiIPqjz9Lj2z4f6UeKZCiiInc2Ny3FJ TOc/hg69SSlF08cvD0b0M3fu8qlnOCkIZ+4abugmxPp7HLWbgR5GvHCjnYU0KSOL8h2Z g11202M7eOpiGRb8GOk+iTeNPjghLm3z/clpg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=rCUVDRza66ZmZMFcE7g9yQaO78lHlCkZ2PRqIZa9esKGepJP7vZk7V+t28fym+BSmm OxoSMRKXx+v3CqUckmorM/+XR2JPBQQHbJf1kwFpntgVBCg6kJ4HKXeu7uzWSi2NStXX nGIRywqbW6BVV0ErhGeySIYTpa1tQrokkZH8k= MIME-Version: 1.0 Received: by 10.150.178.19 with SMTP id a19mr12813827ybf.349.1249426552130; Tue, 04 Aug 2009 15:55:52 -0700 (PDT) In-Reply-To: <4A78B6DD.7060908@chlastak.cz> References: <4A78B6DD.7060908@chlastak.cz> Date: Tue, 4 Aug 2009 15:55:52 -0700 Message-ID: From: Freddie Cash To: mira@chlastak.cz Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-ipfw@freebsd.org Subject: Re: Matching all protocols in /etc/protocols (1 rule) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Aug 2009 23:18:51 -0000 2009/8/4 Miroslav Chlastak > Hi all, > > it's possible to create one rule to pass (or disable) all traffic (all > protocols - from /etc/protocols)? > I know, that I can use "all" keyword. But this keyword "all" mean only > "tcp, udp, icmp" protocols. > But there is more then tcp, udp and icmp protocol (gre,esp,ospf,...). If I > can allow all of this protocols, so at the moment I have to create 134 rules > (1 rule for 1 protocol from /etc/protocols). > If this is for IPFW, just use "ip" or "any". That will match any IP packets, regardless of what protocol data is inside the packet. -- Freddie Cash fjwcash@gmail.com