Date: Fri, 22 Oct 2004 18:01:00 +0200 From: Nicolas Rachinsky <list@rachinsky.de> To: ipfw-mailings <freebsd-ipfw@freebsd.org> Subject: Re: ipfw address-listing woes Message-ID: <20041022160100.GA69585@pc5.i.0x5.de> In-Reply-To: <20041022083605.J20686-100000@tyberius.abccom.bc.ca> References: <1098339493.1973.44.camel@Mobile1.276NET> <20041022083605.J20686-100000@tyberius.abccom.bc.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
* Jon Simola <jon@abccom.bc.ca> [2004-10-22 08:50 -0700]:
> Well, I don't think you can list multiple interfaces unless you're
> matching "in recv xl0 out xmit fxp0" and via appears to just use a text
> string without comparing to interfaces actually existing or not.
${fwcmd_add} deny udp from 0.0.0.0 68 to 255.255.255.255 67 in \{ recv ${if_m} or recv ${if_g} \}
resulting in
deny udp from 0.0.0.0 68 to 255.255.255.255 dst-port 67 in { recv fxp0 or recv fxp1 }
works fine here.
Nicolas
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041022160100.GA69585>