使用 pf 阻止大於特定大小的數據包

pf 有沒有辦法阻止大於特定大小的特定類型的數據包？

AFAIC，pf不能這樣做。您可以使用ipfw’iplen選項：

iplen len-list
        Matches IP packets whose total length, including header and data,
        is in the set len-list, which is either a single value or a list
        of values or ranges specified in the same way as ports.

引用自：https://serverfault.com/questions/261711