flags tcp and abscence of flag

Eduardo Meyer dudu.meyer at gmail.com
Wed Feb 28 19:12:02 UTC 2007


Hello,

I need write a PF rule that does what this IPFW rule do:

deny log tcp from any to any tcpflags fin,!syn,!rst,!ack in

Someone told me to do this:

block drop log in quick from any to any flags F/SRA

But as far as I read the PF FAQ and man page, this is incorrect.
However I did not find a way to to make a rule with absence of a flag,
just like the !flag on ipfw.

Can someone please convert this simple ipfw rule to of?

Thank you.


-- 
===========
Eduardo Meyer
pessoal: dudu.meyer at gmail.com
profissional: ddm.farmaciap at saude.gov.br


More information about the freebsd-pf mailing list