[Bug 245381] ipfw protocol or-block parsing bug when ip protocol is first in list

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Apr 10 03:35:45 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245381

--- Comment #2 from Neel Chauhan <neel at neelc.org> ---
It appears that even on commands like:

# ipfw add 1 deny \{ igmp or ip or ggp or eigrp \} from any to me
00001 deny { igmp or ggp or eigrp } from any to me

It doesn't add ip. I tried this on my laptop and pings went through.

However, this works:

# ipfw add 1 deny \{ ipv4 or igmp or ggp or eigrp \} from any to me
00001 deny { ip4 or igmp or ggp or eigrp } from any to me

The problem is that the command for just "ip" in the kernel/tool is blank.

Theoretically, this problem is solvable but why would you want to block both
IPv4 AND IPv6?

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list