Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Oct 2002 12:45:35 -0400
From:      Dave Dolson <ddolson@sandvine.com>
To:        "'freebsd-ipfw@freebsd.org'" <freebsd-ipfw@freebsd.org>
Subject:   Problem diverting bridged packets
Message-ID:  <FE045D4D9F7AED4CBFF1B3B813C85337A6BA50@mail.sandvine.com>

next in thread | raw e-mail | index | archive | help
Is anyone aware of an ipfw1 issue with diverting packets from the bridge?

I'm finding that a rule like the following will cause the packets to be
dropped and not diverted.
# ipfw add 400 accept icmp from 1.1.1.10 to 1.1.1.4 bridge
(Addresses 1.1.1.10 and 1.1.1.4 are on opposite sides of the local machine.)

I'm running -stable 4.6 code, but not quite the latest, so sorry if this is
old news.
4.6-RELEASE FreeBSD 4.6-RELEASE #7

I know that my divert client is working properly because it properly reads
and re-inserts packets for non-divert rules involving packets for the local
host (not bridged).
E.g., this works fine (1.1.1.1 is the local host)
divert 9001 icmp from 1.1.1.10 to 1.1.1.1

Thanks,

David Dolson
Senior Software Engineer
Sandvine Incorporated.
Tel: 519-880-2400 x2737
www.sandvine.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FE045D4D9F7AED4CBFF1B3B813C85337A6BA50>