Packet size filtering



  • hello!  :)

    is it possible to filter packets for its size under pfSense?

    e.g: i had a linux box before pfSense that i was using for firewalling, and it has a certain iptable rule as follow:

    $ iptables -A OUTPUT -p tcp -m length --length 1024: --dport 1024: -j REJECT
    $ iptables -A OUTPUT -p udp -m length --length 1024: --dport 1024: -j REJECT
    

    every packet sent on tcp/udp, from port 1024+ with 1024+ bytes is rejected.

    anyone have an idea how i could reproduce this behaviour under pfSense? i would really appreciate if it's possible :D

    cheers,
    richard.


Log in to reply