Date: Tue, 09 May 2006 17:45:02 -0300 From: Carlos E Gaspar <cegaspar@ifi.unicamp.br> To: freebsd-net@freebsd.org Subject: ipfw divert with layer2 (if_bridge) packets Message-ID: <4460FF4E.10305@ifi.unicamp.br>
next in thread | raw e-mail | index | archive | help
Hi.
I have the following setup:
FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22
BRT 2006 root@abc:/usr/src/sys/alpha/compile/ABC alpha
bridge0: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
ether xx:xx:xx:xx:xx:xx
priority 32768 hellotime 2 fwddelay 15 maxage 20
member: de1 flags=3<LEARNING,DISCOVER>
member: de0 flags=3<LEARNING,DISCOVER>
de1 is my internal interface (local) and de0 the external (internet).
host1 is on de1. Bridge works fine (if_bridge).
With the following sysctl's:
net.link.bridge.pfil_onlyip: 0
net.link.bridge.pfil_member: 1
net.link.bridge.pfil_bridge: 0
net.link.bridge.ipfw: 0
net.link.ether.ipfw: 1
I'm trying to divert layer2 packets using this ipfw rule, but the
counters are always 0 0 as seen with 'ipfw show'.
divert 8000 log all from host1 to any layer2 in via de1
What's wrong? It's possible to do that with if_bridge? Do I need FBSD 6.1?
Thanks for advance... sorry about my english
Carlos Gaspar
carlosgaspar@yahoo.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4460FF4E.10305>