As you know, iptables has -m (match) such as :
-m string
-m state
-m -iplimit
and so on...
My question: Does PF has similar features such as -m of iptables?
Asked
Active
Viewed 510 times
4
Khaled
- 35,688
- 8
- 69
- 98
PersianGulf
- 596
- 6
- 21
1 Answers
5
AFAIK, pf does not have the flexibility and modules available in iptables. iptables comes with really large number of modules that provide more match options and others that provide more targets. You can even develop your own module. This page provides some explanation regarding iptables development if you are interested.
Khaled
- 35,688
- 8
- 69
- 98
-
I have a serious question: i didn't any doc accordint to develop module, Can you give me a link? – PersianGulf May 16 '15 at 13:24
-
@MohsenPahlevanzadeh: Are you asking about a link for iptables module development? – Khaled May 16 '15 at 13:46
-
No, pf development, You said: > You can even develop your own module – PersianGulf May 16 '15 at 14:01
-
@MohsenPahlevanzadeh: I am talking about iptables. I did not find any reference about `pf` modules/plugins or something similar. – Khaled May 17 '15 at 06:58