Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Feb 2007 18:10:50 +0100
From:      "n j" <nino80@gmail.com>
To:        "FreeBSD Questions" <freebsd-questions@freebsd.org>
Subject:   IPFW rule syntax
Message-ID:  <92bcbda50702280910g12a531d7ve7062e8f4e25261f@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hello,

I have observed the following behavior in IPFW (note the asterisks):

ipfw add 1000 allow tcp from 10.1.2.3 1111 to 10.3.2.1 *9999* in

gets added to the rule list as:

01000 allow tcp from 10.1.2.3 1111 to 10.3.2.1 *dst-port 9999* in?

Why does IPFW convert my "9999" to "dst-port 9999" and "1111" doesn't
get converted to something like "src-port 1111"? Does someone know a
logical explanation for this or is this a halfway done attempt of
making the rules more readable?

This behavior is not a problem, but older versions of IPFW don't
exhibit it, so it was probably added for some reason.

Thanks!

-- 
Nino



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?92bcbda50702280910g12a531d7ve7062e8f4e25261f>