Good day,

 

I'm drawing up my rule set right now. One of the rules is a default deny for
all communications between source and destination ports that are outside the
well-known port range. To do this, I'm using the rule

 

block in quick on elxl0 proto tcp/udp from any port 1023 >< 65536 to any
port 1023 >< 65536

 

When checking it out using ipfstat -I, I get:

 

block in quick on elxl0 proto tcp/udp from any port 1023 >< 0 to any port
1023 >< 0

 

I can understand that IP filter considers the port as a word data type but
what about the interpretation in practice?

 

Cheers,

 

Etienne

 

 

 

 


No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.485 / Virus Database: 269.13.15/1002 - Release Date: 11/09/2007
17:46


Reply via email to