Date: Wed, 15 Jun 2016 13:03:08 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-amd64@FreeBSD.org Subject: [Bug 210303] garbage in ipf(5) Message-ID: <bug-210303-6@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D210303 Bug ID: 210303 Summary: garbage in ipf(5) Product: Documentation Version: Latest Hardware: amd64 OS: Any Status: New Severity: Affects Many People Priority: --- Component: Documentation Assignee: freebsd-doc@FreeBSD.org Reporter: leventelist@gmail.com CC: freebsd-amd64@FreeBSD.org CC: freebsd-amd64@FreeBSD.org There is a garbage written in ipf(5) TCP/UDP Port Matching Having specified which protocol is being matched, it is then possi= ble to indicate which port numbers a packet must have in order to match = the rule. Due to port numbers being used differently to addresses, it = is therefore possible to match on them in different ways. IPFilter all= ows you to use the following logical operations: < x is true if the port number is greater than or equal to x = and less than or equal to y is true if the port number in the pac= ket is less than x and the whole port range matching simply not implemented: Additionally, there are a number of ways to specify a range of ports: garbage: x <> y is true if the port number is less than a and greater than y x >< y is true if the port number is greater than x and less than y x:y is true if the port number is greater than or equal to x = and less than or equal to y Even the example doesn't work: pass in proto tcp from 127.0.0.0/8 to any port =3D 6000:6009 It says: syntax error error at ":", line 2 --=20 You are receiving this mail because: You are on the CC list for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-210303-6>