d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a bug which avoided that rules for matching port numbers for SCTP

Browse Source 
packets where actually matched.
While there, make clean in the man-page that SCTP port numbers are
supported in rules.

MFC after:	1 month
This commit is contained in:
Michael Tuexen 2017-10-02 18:25:30 +00:00
parent 7bc85edd15
commit 945906384d
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sbin/ipfw/ipfw.8
View File

@ -1,7 +1,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd April 3, 2017
.Dd October 2, 2017
.Dt IPFW 8
.Os
.Sh NAME
@ -537,7 +537,7 @@ for filtering packets, among the following:
.It Layer-2 header fields
When available
.It IPv4 and IPv6 Protocol
TCP, UDP, ICMP, etc.
SCTP, TCP, UDP, ICMP, etc.
.It Source and dest. addresses and ports
.It Direction
See Section
@ -1396,7 +1396,7 @@ error-prone.
No support for sets of IPv6 addresses is provided because IPv6 addresses
are typically random past the initial prefix.
.It Ar ports : Bro Ar port | port Ns \&- Ns Ar port Ns Brc Ns Op , Ns Ar ports
For protocols which support port numbers (such as TCP and UDP), optional
For protocols which support port numbers (such as SCTP, TCP and UDP), optional
.Cm ports
may be specified as one or more ports or port ranges, separated
by commas but no spaces, and an optional

4
sys/netpfil/ipfw/ip_fw2.c
View File

@ -1663,8 +1663,8 @@ do { \
* to guarantee that we have a
* packet with port info.
*/
if ((proto==IPPROTO_UDP || proto==IPPROTO_TCP)
&& offset == 0) {
if ((proto==IPPROTO_UDP || proto==IPPROTO_TCP ||
proto==IPPROTO_SCTP) && offset == 0) {
u_int16_t x =
(cmd->opcode == O_IP_SRCPORT) ?
src_port : dst_port ;