On Wed, Feb 28, 2007 at 04:48:37PM -0300, Eduardo Meyer wrote:

> Translating to human lang, what I want is "look everywhere and match
> only packets with fin set but syn, rst and ack unset.
> 
> How can I do the "unset" evaluation?

"flags F/FSRA" does precisely that. It is not the same as "flags F/F",
which would only test whether FIN is set.

Daniel
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to