有没有办法使用 pf 来阻止大于特定大小的特定类型的数据包?
答案1
据我所知,pf
无法做到这一点。您可以使用ipfw
的iplen
选项:
iplen len-list
Matches IP packets whose total length, including header and data,
is in the set len-list, which is either a single value or a list
of values or ranges specified in the same way as ports.