Bug 210303
| Summary: | garbage in ipf(5) | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Documentation | Reporter: | leventelist | ||||
| Component: | Manual Pages | Assignee: | Cy Schubert <cy> | ||||
| Status: | Closed FIXED | ||||||
| Severity: | Affects Many People | CC: | doc, lwhsu | ||||
| Priority: | --- | ||||||
| Version: | Latest | ||||||
| Hardware: | amd64 | ||||||
| OS: | Any | ||||||
| Attachments: |
|
||||||
You mean like this? pass out proto tcp from any port 600 >< 1023 to X.X.X.252 port = 515 flags S/SAFR keep state keep frags pass in proto tcp from 127.0.0.0/8 to any port 6000:6009 The example should not contain an =. Created attachment 219136 [details]
Remove random = in example.
That random equal sign is incorrect.
A commit references this bug: Author: cy Date: Tue Oct 27 04:35:48 UTC 2020 New revision: 367070 URL: https://svnweb.freebsd.org/changeset/base/367070 Log: Remove a random equal sign from the example. It should not be there. It's a syntax error. PR: 210303 Reported by: leventelist at gmail.com MFC after: 3 days Changes: head/contrib/ipfilter/man/ipf.5 A commit references this bug: Author: cy Date: Fri Oct 30 00:34:41 UTC 2020 New revision: 367155 URL: https://svnweb.freebsd.org/changeset/base/367155 Log: MFC r367070: Remove a random equal sign from the example. It should not be there. It's a syntax error. PR: 210303 Reported by: leventelist at gmail.com Changes: _U stable/10/ stable/10/contrib/ipfilter/man/ipf.5 _U stable/11/ stable/11/contrib/ipfilter/man/ipf.5 _U stable/12/ stable/12/contrib/ipfilter/man/ipf.5 |
There is a garbage written in ipf(5) TCP/UDP Port Matching Having specified which protocol is being matched, it is then possible to indicate which port numbers a packet must have in order to match the rule. Due to port numbers being used differently to addresses, it is therefore possible to match on them in different ways. IPFilter allows you to use the following logical operations: < x is true if the port number is greater than or equal to x and less than or equal to y is true if the port number in the packet is less than x and the whole port range matching simply not implemented: Additionally, there are a number of ways to specify a range of ports: garbage: x <> y is true if the port number is less than a and greater than y x >< y is true if the port number is greater than x and less than y x:y is true if the port number is greater than or equal to x and less than or equal to y Even the example doesn't work: pass in proto tcp from 127.0.0.0/8 to any port = 6000:6009 It says: syntax error error at ":", line 2