Why this ipf rule does not work？

edwardj

ipf 3.4.31，规则如下：

1. 
   
2.   @1 pass out from any to any
   
3.   @1 pass in from any to any
   
4.   @2 block return-rst in log quick proto tcp from any to any port 135 >< 139
   
5.   @3 block return-rst in log quick proto tcp from any to any port = 445
   
6.   @4 block return-icmp-as-dest(port-unr) in log quick proto udp from any to any port 135 >< 139
   
7.   @5 block return-icmp-as-dest(port-unr) in log quick proto udp from any to any port = 445
   

复制代码

偶发现这条规则不起作用：

1. 
   
2.   @2 block return-rst in log quick proto tcp from any to any port 135 >< 139
   

复制代码

如果把上面那条规则改成如下5条单独的规则，工作正常。

1. 
   
2.   block return-rst in log quick proto tcp from any to any port 135
   
3.   block return-rst in log quick proto tcp from any to any port 136
   
4.   block return-rst in log quick proto tcp from any to any port 137
   
5.   block return-rst in log quick proto tcp from any to any port 138
   
6.   block return-rst in log quick proto tcp from any to any port 139

复制代码

而同样使用Port range，这条规则就可以

1. 
   
2.   @4 block return-icmp-as-dest(port-unr) in log quick proto udp from any to any port 135 >< 139
   

复制代码

难道Port range对TCP规则无效？