From owner-freebsd-net@FreeBSD.ORG  Sat May 17 12:53:55 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3330D37B401
	for <freebsd-net@freebsd.org>; Sat, 17 May 2003 12:53:54 -0700 (PDT)
Received: from electricrain.com (electricrain.com [64.71.143.226])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6572D43FA3
	for <freebsd-net@freebsd.org>; Sat, 17 May 2003 12:53:54 -0700 (PDT)
	(envelope-from greg@electricrain.com)
Received: (qmail 10778 invoked by uid 601); 17 May 2003 19:53:54 -0000
Date: Sat, 17 May 2003 12:53:54 -0700
From: "Gregory P. Smith" <greg@electricrain.com>
To: freebsd-net@freebsd.org
Message-ID: <20030517195354.GF13501@zot.electricrain.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
Subject: matching a range of iplens with ipfw2?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 17 May 2003 19:53:55 -0000

Is there a way to match a range of iplen values in an ipfw2 rule?
(say i wanted a rule to match all tcp packets <= 64 bytes).

Entering 24 rules for iplen 40 thru 64 seems highly inefficient but
i don't see any mention of how to look for a range of iplens in the
man pages.

tia -
Greg