Date: Wed, 14 Mar 2001 08:31:40 From: "Some Person" <ntvsunix@hotmail.com> To: freebsd-security@freebsd.org Subject: Re: Bridging only 2 interfaces??? Message-ID: <F113LSAQV6uPDVniSnR0001b7d3@hotmail.com>
next in thread | raw e-mail | index | archive | help
Speaking of that, is it still not possible to filter bridged frames on FreeBSD with IPF? Personally IPF is my prefered choice over IPFW, although of course IPFW does have DUMMYNET.. :) Dunno if that's been changed yet, or if there's any plans for it? In the meanwhile, I've opted for OpenBSD and to be honest, I love it and haven't seen any performance penalty at all... I use FreeBSD for all other things too, but think would be kewl to have this in FreeBSD as well... Thanks. > >On Tue, Mar 13, 2001 at 09:57:35PM -0700, Craig Chaney wrote: > > I have set up a bridging firewall that has 3 interfaces. One of the > > interfaces is the protected side of the machine, one is the internet >side of > > the machine, and the third is an interface in to my local network for > > management purposes. Is it possible to set up the machine to bridge just >the > > interfaces not connected to the local network? If so how? > >You should have a look at sysctl net.link.ether.bridge_cfg where you can >define which interfaces that are bridged > >eg: sysctl -w net.link.ether.bridge_cfg: fxp0:1,fxp1:1,fxp2:0, >which will bridge on fxp0 and fxp1 but not fxp2 > >// Rene > >-- >Micro$oft is not the answer, Micro$oft is the question, the answer is no. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F113LSAQV6uPDVniSnR0001b7d3>