Date: Wed, 4 Jun 2003 11:49:29 -0400 From: RS <mls@theosis.net> To: freebsd-questions@freebsd.org Subject: Question: ipfw2, MAC addresses and divert. Message-ID: <20030604154929.GB729@theosis.net>
next in thread | raw e-mail | index | archive | help
Hi,
I'm trying to write some ipfw rules to divert packets from a machine
matching a MAC address to a natd process running on a custom divert
port.
Here are the rules I tries that don't work:
ipfw add 99 divert 8669 mac any 00:E0:18:F1:57:94 via wi0
ipfw add 99 divert 8669 mac 00:E0:18:F1:57:94 any via wi0
These do not match and the packets don't get diverted.
However, something like this does work:
ipfw add 49 deny mac any 00:E0:18:F1:57:94 via wi0
ipfw add 49 deny mac 00:E0:18:F1:57:94 any via wi0
Packets are appropriately denied.
This will work, using the ipaddress of the machine instead of its MAC:
ipfw add 99 divert 8669 ip from 10.0.0.243 to any via wi0
ipfw add 99 divert 8669 ip from any to 10.0.0.243 via wi0
What changes between using "deny" versus "divert" as a rule action that
MAC addresses don't match? Any suggestions?
Thank you.
--
mls@theosis.net To be sure of hitting the target, shoot first, and
call whatever you hit the target. -Ashleigh
Brilliant
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030604154929.GB729>