docs/64534: misfitting in two parts of man 8 ipfw aboutquantity of ports that may be specified in a rule

Marc Silver marcs at draenor.org
Tue Mar 23 14:20:26 UTC 2004


The following reply was made to PR docs/64534; it has been noted by GNATS.

From: Marc Silver <marcs at draenor.org>
To: freebsd-gnats-submit at FreeBSD.org, chd at qq.org.ua
Cc:  
Subject: Re: docs/64534: misfitting in two parts of man 8 ipfw about quantity
 of ports that may be specified in a rule
Date: Tue, 23 Mar 2004 16:14:00 +0200

 This is a multi-part message in MIME format.
 --------------030705040504080004000602
 Content-Type: text/plain; charset=us-ascii; format=flowed
 Content-Transfer-Encoding: 7bit
 
 Hey there,
 
 I've confirmed that this is indeed correct.  IPFW2 is limited to 30 
 ports/ranges, and returns 'ipfw: getsockopt(IP_FW_ADD): Invalid 
 argument' when trying to use more than 30, while IPFW1 complains more 
 gracefully with 'ipfw: too many ports (max is 10)' when trying to use 
 more than 10.
 
 Here's a patch for ipfw.8 which hopefully corrects the problem.
 
 Cheers,
 Marc
 
 
 --------------030705040504080004000602
 Content-Type: text/plain;
  name="ipfw.8-patch"
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline;
  filename="ipfw.8-patch"
 
 --- ipfw.8-orig	Tue Mar 23 16:02:01 2004
 +++ ipfw.8	Tue Mar 23 16:07:46 2004
 @@ -831,8 +831,14 @@
  Service names (from
  .Pa /etc/services )
  may be used instead of numeric port values.
 -The length of the port list is limited to 30 ports or ranges,
 -though one can specify larger ranges by using an
 +The length of the port list is dependant on the version of
 +.Nm
 +being used;
 +.Nm ipfw1
 +is limited to 10 ports or ranges, while
 +.Nm ipfw2 
 +increases this limit to 30.
 +One can specify larger ranges by using an
  .Em or-block
  in the
  .Cm options
 @@ -1819,7 +1825,7 @@
  .It Port specifications
  .Nm ipfw1
  only allows one port range when specifying TCP and UDP ports, and
 -is limited to 10 entries instead of the 15 allowed by
 +is limited to 10 entries instead of the 30 allowed by
  .Nm ipfw2 .
  Also, in
  .Nm ipfw1
 
 --------------030705040504080004000602--



More information about the freebsd-doc mailing list