https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245381
Bug ID: 245381
Summary: ipfw protocol or-block parsing bug when ip protocol is
first in list
Product: Base System
Version: 12.1-RELEASE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
ipfw cannot parse an or-block when protocol 'ip' is first in the list.
To reproduce:
# ipfw flush
Are you sure? [yn] y
Flushed all rules.
# Add rule with or-block without 'ip' protocol - success
# ipfw add 1000 deny \{ igmp or ggp or eigrp \} from any to me
01000 deny { igmp or ggp or eigrp } from any to me
# Try to add or-block with 'ip' protocol first in list - error
# ipfw add 1100 deny \{ ip or igmp or ggp or eigrp \} from any to me
ipfw: invalid OR block
# Reorder or-block so 'ip' protocol is not first in list - success
# ipfw add 1200 deny \{ igmp or ip or ggp or eigrp \} from any to me
01200 deny { igmp or ggp or eigrp } from any to me
#
Note also that the ip protocol does not show up in the last accepted rule.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"