From owner-freebsd-bugs@FreeBSD.ORG Tue Jan 2 10:50:21 2007 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 46A3216A40F for ; Tue, 2 Jan 2007 10:50:21 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.freebsd.org (Postfix) with ESMTP id EBC0A13C441 for ; Tue, 2 Jan 2007 10:50:20 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id l02AoKcU093406 for ; Tue, 2 Jan 2007 10:50:20 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id l02AoKjd093404; Tue, 2 Jan 2007 10:50:20 GMT (envelope-from gnats) Date: Tue, 2 Jan 2007 10:50:20 GMT Message-Id: <200701021050.l02AoKjd093404@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Maxim Konovalov Cc: Subject: Re: bin/106382: parentesis bug in IPFW command X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Maxim Konovalov List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jan 2007 10:50:21 -0000 The following reply was made to PR bin/106382; it has been noted by GNATS. From: Maxim Konovalov To: Joao Rocha Braga Filho Cc: bug-followup@freebsd.org Subject: Re: bin/106382: parentesis bug in IPFW command Date: Tue, 2 Jan 2007 13:24:10 +0300 (MSK) Hi, [...] > The man page says > > " Additionally, sets of alternative match patterns (or-blocks) can > be constructed by putting the patterns in lists enclosed between > parentheses ( ) or braces { }, and using the or operator as follows: > ipfw add 100 allow ip from { x or not y or z } to any" > > but when I use > > root:goffredo[627] ipfw add 2 count tcp from any to '(' any 22 to any 23 ')' > ipfw: missing ")" > > root:goffredo[628] ipfw add 2 count tcp from any to \( any 22 to any 23 \) > ipfw: missing ")" > > root:goffredo[629] ipfw add 2 count tcp from any to '{' any 22 to any 23 '}' > ipfw: missing ")" > > root:goffredo[630] ipfw add 2 count tcp from any to \{ any 22 to any 23 \} > ipfw: missing ")" What does "from any to \{ any 22 to any 23 \}" mean in plain English? I think you need something like ipfw -n add 2 count tcp from any to any 22,23 or ipfw -n add 2 count tcp from any to \{ 2.2.2.2 or 1.1.1.1 \} 22,23 -- Maxim Konovalov