Bug 242318

Summary:

ipfw - fix option 'ipversion' matching only IPv4 packets

Product:

Documentation

Reporter:

Freddy DISSAUX <dsx>

Component:

Manual Pages

Assignee:

freebsd-ipfw (Nobody) <ipfw>

Status:

New ---

Severity:

Affects Only Me

CC:

doc

Priority:

---

Keywords:

patch

Version:

Latest

Hardware:

Any

OS:

Any

Attachments:

Description	Flags
replace IP by IPv4	none

Description Freddy DISSAUX 2019-11-30 09:42:06 UTC

Created attachment 209546 [details]
replace IP by IPv4

option 'ipversion' match only IPv4 packets:

sys/netpfil/ipfw/ip_fw2.c:
...
  2207                          case O_IPVER:
  2208                                  match = (is_ipv4 &&
  2209                                      cmd->arg1 == ip->ip_v);
  2210                                  break;

As others options (iptos, ipid ...), replace IP by IPv4:

      ipversion ver
             Matches IP packets whose IP version field is ver.

become

     ipversion ver
             Matches IPv4 packets whose IP version field is ver.