From owner-freebsd-ipfw  Mon Jul 29 22:48:55 2002
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id CA68237B400; Mon, 29 Jul 2002 22:48:52 -0700 (PDT)
Received: from iguana.icir.org (iguana.icir.org [192.150.187.36])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 596A443E65; Mon, 29 Jul 2002 22:48:52 -0700 (PDT)
	(envelope-from rizzo@iguana.icir.org)
Received: (from rizzo@localhost)
	by iguana.icir.org (8.11.6/8.11.3) id g6U5mqQ49174;
	Mon, 29 Jul 2002 22:48:52 -0700 (PDT)
	(envelope-from rizzo)
Date: Mon, 29 Jul 2002 22:48:52 -0700
From: Luigi Rizzo <rizzo@icir.org>
To: "Crist J. Clark" <cjc@FreeBSD.ORG>
Cc: ipfw@FreeBSD.ORG
Subject: Re: RFC: ipfw behaviour with non IPv4 packets
Message-ID: <20020729224852.A49134@iguana.icir.org>
References: <20020725001652.A94913@iguana.icir.org> <20020730054340.GB89241@blossom.cjclark.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20020730054340.GB89241@blossom.cjclark.org>; from crist.clark@attbi.com on Mon, Jul 29, 2002 at 10:43:40PM -0700
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ipfw.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ipfw>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ipfw>
X-Loop: FreeBSD.ORG

when you pass inconsistent options the rule will never match --
now a more sophisticated user interface might detect that
and prevent such a rule from being entered, but this is not
a major issue.

	cheers
	luigi

On Mon, Jul 29, 2002 at 10:43:40PM -0700, Crist J. Clark wrote:
...
> What happens when you do,
> 
>   pass ip from any to any ipoptions blah,blah...
> 
> Or some other field that is inconsistent for both IPv4 and IPv6?
> 
> Or more simply can you do,
> 
>   pass ip from 192.168.0.1 to any
> 
> And,
> 
>   pass ip from fe80::203:0405:0607:0809 to any
> 
> And,
> 
>   pass ip from 192.168.0.1 or fe80::203:0405:0607:0809 to any
> 
> And ipfw(8) will "do the right thing?" (Whatever that might be?)
> -- 
> Crist J. Clark                     |     cjclark@alum.mit.edu
>                                    |     cjclark@jhu.edu
> http://people.freebsd.org/~cjc/    |     cjc@freebsd.org
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-ipfw" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message