HomeFreeBSD

Add "tcpmss" opcode to match the TCP MSS value.

Description

Add "tcpmss" opcode to match the TCP MSS value.

With this opcode it is possible to match TCP packets with specified
MSS option, whose value corresponds to configured in opcode value.
It is allowed to specify single value, range of values, or array of
specific values or ranges. E.g.

  1. ipfw add deny log tcp from any to any tcpmss 0-500

Reviewed by: melifaro,bcr
Obtained from: Yandex LLC
MFC after: 1 week
Sponsored by: Yandex LLC

Details

Committed
aeJun 21 2019, 10:54 AM
Parents
rS349266: ip_output: pass PFIL_FWD in the slow path
Branches
Unknown
Tags
Unknown