Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Apr 2020 03:35:44 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 245381] ipfw protocol or-block parsing bug when ip protocol is first in list
Message-ID:  <bug-245381-227-15wEauIpPN@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-245381-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-245381-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D245381

--- Comment #2 from Neel Chauhan <neel@neelc.org> ---
It appears that even on commands like:

# ipfw add 1 deny \{ igmp or ip or ggp or eigrp \} from any to me
00001 deny { igmp or ggp or eigrp } from any to me

It doesn't add ip. I tried this on my laptop and pings went through.

However, this works:

# ipfw add 1 deny \{ ipv4 or igmp or ggp or eigrp \} from any to me
00001 deny { ip4 or igmp or ggp or eigrp } from any to me

The problem is that the command for just "ip" in the kernel/tool is blank.

Theoretically, this problem is solvable but why would you want to block both
IPv4 AND IPv6?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-245381-227-15wEauIpPN>