[DragonFlyBSD - Bug #2972] ipfw3 "deny to me" does not work correctly

[sigttou]

Issue #2972 has been updated by sigttou.


Suggest close: Commit 5945821c55b6, fixes the destination `me` check. check_to_me() previously read ip_src; it now reads ip_dst before looking up the local interface address.

----------------------------------------
Bug #2972: ipfw3 "deny to me" does not work correctly
http://bugs.dragonflybsd.org/issues/2972#change-14838

* Author: mneumann
* Status: New
* Priority: Normal
* Target version: 6.4
* Start date: 2016-12-27
----------------------------------------
I am using ipfw3 with following rule:

ipfw3 add 1000 deny tcp to me dst-port 443

But it does not block incoming traffic. It works when I replace "me" with the IP address of the incoming interface.

I am running 4.7-DEVELOPMENT DragonFly 7f20f9e1c-DEVELOPMENT.

Also I noticed that there is some gap between the man page and the current implementation.



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account