Is there a way with pf to block specific type of packets larger than specific size?

link|improve this question

50% accept rate
feedback

1 Answer

up vote 3 down vote accepted

AFAIC, pf can't do this. You can use ipfw's iplen option:

 iplen len-list
         Matches IP packets whose total length, including header and data,
         is in the set len-list, which is either a single value or a list
         of values or ranges specified in the same way as ports.
link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.