From owner-freebsd-ipfw@freebsd.org Wed Jun 6 17:36:07 2018 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BCF76FDBF32 for ; Wed, 6 Jun 2018 17:36:07 +0000 (UTC) (envelope-from driesm.michiels@gmail.com) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 30DD97ED7C for ; Wed, 6 Jun 2018 17:36:07 +0000 (UTC) (envelope-from driesm.michiels@gmail.com) Received: by mail-wm0-x236.google.com with SMTP id j15-v6so13670804wme.0 for ; Wed, 06 Jun 2018 10:36:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:mime-version:content-language :thread-index; bh=HooFx/sVKb1W13jEPd12bvcptouORADFatIVHnCqDMc=; b=ON5NVzygF4VTLnmrI/Lkx6eDcqHn9FHgtRHe8cLS1sHEUYWMmkskzah+tqXKF34SR9 XNM1oC89CsGVd/Uaoqz4XQV+RCEwHkvlEP1foHZJS2jBh0v4VhVJxN6oarKUIYneeM5p Xv0qaMgaur5ad29hzUuPtkfvJgQU6vZkiDA3rBux4xq37w4n1xRJmlibNi7iB5R50e54 jfJ3+Ibf8DgL6ScuEa3heYjHit8Dir3QDREie3NtopIzCDHa4CVKL7P9n4mWGHwZmBf0 h6CzruGMXKzboUhsEs5IkHhk5H1iJMx91xs1P5UkMTkvd+culdAZbAyStDrn7i8HZfZM Oemg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-language:thread-index; bh=HooFx/sVKb1W13jEPd12bvcptouORADFatIVHnCqDMc=; b=dhdrhhdB1AKv3xN9M9Bu7nipYtWNmUY5NtUHkNxzorOVDSV8OmzqYFu5wzYiQs02uO S7tHaLr6OCvi5ZUOXtE67gwGolxQ5CgwpMnpgFDx8hh7HQch5EC920VKMsVQlH0Shc3E rbP8nXqbWb2Jk2X0g5NV8mcf8PEKviKlKrAHdiviCquQf1djAJEJ8FUL6wM0KXJjQt5a h68e1BhiUjxmO6g10n+y+3HJDlQuKgbV/i5rHLGjLedf9/B1fMxgvs4mEJsjl2QrDueW /b02dP9PVcVtvq6QIF8qY12C1UEaKuG9MpkfL1NGsIfz79g7d0Vyl5k72odoKt0oNQRr tkQA== X-Gm-Message-State: APt69E0CmhnE8a7NwahRULehUv8JapO0HWWXwFkaAA2ALTeH9FoWdHgG +Zvd2rLp23maNH7dXNDFjfiwnjsn X-Google-Smtp-Source: ADUXVKLQsbApmCyOQgVeSYkwxqwawB/3Ntb/G1YtUPCO9jTu22ElvB0QOkaPF+CPIDwdCOYZfLB6Ow== X-Received: by 2002:a1c:3f56:: with SMTP id m83-v6mr2647269wma.88.1528306565701; Wed, 06 Jun 2018 10:36:05 -0700 (PDT) Received: from DriesPC (94-224-232-102.access.telenet.be. [94.224.232.102]) by smtp.gmail.com with ESMTPSA id o53-v6sm81297824wrc.96.2018.06.06.10.36.04 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 06 Jun 2018 10:36:04 -0700 (PDT) From: "Dries Michiels" To: Subject: Matching rules on ip4/ip6 with udp/tcp Date: Wed, 6 Jun 2018 19:36:03 +0200 Message-ID: <001001d3fdbc$d804d270$880e7750$@gmail.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Content-Language: nl-be Thread-Index: AdP9vNcCBHZp3ip9TyKKRMz3xx+tdg== Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.26 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jun 2018 17:36:08 -0000 Dear Mailing List, Is there are way to match packets specifying both network generation ip4 or ip6 together with the protocol such as tcp or udp? Currently the following rules are possible (examples): ipfw add 1 allow udp from any to me 22 in recv em0 ipfw add 1 allow ip4 from any to me 22 in recv em0 The following rule is not possible (example): ipfw add 1 allow ip4 udp from any to me 22 in recv em0 Is there a workaround for this or some reason why this hasn't been implemented? Or do I simply not have the rule syntax right. Regards, Dries