Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Oct 2004 18:01:00 +0200
From:      Nicolas Rachinsky <list@rachinsky.de>
To:        ipfw-mailings <freebsd-ipfw@freebsd.org>
Subject:   Re: ipfw address-listing woes
Message-ID:  <20041022160100.GA69585@pc5.i.0x5.de>
In-Reply-To: <20041022083605.J20686-100000@tyberius.abccom.bc.ca>
References:  <1098339493.1973.44.camel@Mobile1.276NET> <20041022083605.J20686-100000@tyberius.abccom.bc.ca>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
* Jon Simola <jon@abccom.bc.ca> [2004-10-22 08:50 -0700]:
> Well, I don't think you can list multiple interfaces unless you're
> matching "in recv xl0 out xmit fxp0" and via appears to just use a text
> string without comparing to interfaces actually existing or not.

${fwcmd_add} deny udp from 0.0.0.0 68 to 255.255.255.255 67 in \{ recv ${if_m} or recv ${if_g} \} 
resulting in
deny udp from 0.0.0.0 68 to 255.255.255.255 dst-port 67 in { recv fxp0 or recv fxp1 }
works fine here.

Nicolas



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20041022160100.GA69585>