Home / server / Questions / 261711
Accepted
seaquest
Asked: 2011-04-21 04:47:58 +0800 CST

blocking packets larger then specific size with pf

  • 772

Is there a way with pf to block specific type of packets larger than specific size?

freebsd pfsense pf

1 Answers

  1. Best Answer

    AFAIC, pf can't do this. You can use ipfw's iplen option:

     iplen len-list
         Matches IP packets whose total length, including header and data,
         is in the set len-list, which is either a single value or a list
         of values or ranges specified in the same way as ports.
    • 3