3

Is there a way with pf to block specific type of packets larger than specific size?

seaquest
  • 698
  • 2
  • 12
  • 25

1 Answers1

3

AFAIC, pf can't do this. You can use ipfw's iplen option:

 iplen len-list
         Matches IP packets whose total length, including header and data,
         is in the set len-list, which is either a single value or a list
         of values or ranges specified in the same way as ports.
Eugene Yarmash
  • 2,433
  • 5
  • 34
  • 54