https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245381

            Bug ID: 245381
           Summary: ipfw protocol or-block parsing bug when ip protocol is
                    first in list
           Product: Base System
           Version: 12.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

ipfw cannot parse an or-block when protocol 'ip' is first in the list.

To reproduce:

# ipfw flush
Are you sure? [yn] y

Flushed all rules.

# Add rule with or-block without 'ip' protocol - success
# ipfw add 1000 deny \{ igmp or ggp or eigrp \} from any to me 
01000 deny { igmp or ggp or eigrp } from any to me

# Try to add or-block with 'ip' protocol first in list - error
# ipfw add 1100 deny \{ ip or igmp or ggp or eigrp \} from any to me
ipfw: invalid OR block

# Reorder or-block so 'ip' protocol is not first in list - success
# ipfw add 1200 deny \{ igmp or ip or ggp or eigrp \} from any to me
01200 deny { igmp or ggp or eigrp } from any to me
# 

Note also that the ip protocol does not show up in the last accepted rule.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to