From owner-freebsd-net@FreeBSD.ORG  Fri Jun 20 11:43:31 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8F82137B401
	for <freebsd-net@freebsd.org>; Fri, 20 Jun 2003 11:43:31 -0700 (PDT)
Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1B75443F75
	for <freebsd-net@freebsd.org>; Fri, 20 Jun 2003 11:43:31 -0700 (PDT)
	(envelope-from rizzo@xorpc.icir.org)
Received: from xorpc.icir.org (localhost [127.0.0.1])
	by xorpc.icir.org (8.12.8p1/8.12.3) with ESMTP id h5KIhUQg098185;
	Fri, 20 Jun 2003 11:43:30 -0700 (PDT)
	(envelope-from rizzo@xorpc.icir.org)
Received: (from rizzo@localhost)
	by xorpc.icir.org (8.12.8p1/8.12.3/Submit) id h5KIhUrs098184;
	Fri, 20 Jun 2003 11:43:30 -0700 (PDT)
	(envelope-from rizzo)
Date: Fri, 20 Jun 2003 11:43:30 -0700
From: "'Luigi Rizzo'" <rizzo@icir.org>
To: Don Bowman <don@sandvine.com>
Message-ID: <20030620114330.A98172@xorpc.icir.org>
References: <FE045D4D9F7AED4CBFF1B3B813C8533702741AF6@mail.sandvine.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <FE045D4D9F7AED4CBFF1B3B813C8533702741AF6@mail.sandvine.com>;
	from don@sandvine.com on Fri, Jun 20, 2003 at 02:18:17PM -0400
cc: "'freebsd-net@freebsd.org'" <freebsd-net@freebsd.org>
Subject: Re: nested ipfw dummynet pipes
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jun 2003 18:43:31 -0000

On Fri, Jun 20, 2003 at 02:18:17PM -0400, Don Bowman wrote:
...
> Thanks very much, I will check this. I assume this will be true
> for IPFW2 rather than IPFW.

one_pass actually affect both.
the comment in parentheses refers to "layer 2 firewalling
which is an ipfw2-only fature (bridge firewalling
is also available with ipfw1)

cheers
luigi

> It appears that 1.16.2.23, nov 21 2002, RELENG_4 has this
> from the log:
> "MFC: obey to fw_one_pass in bridge and layer 2 firewalling (the latter
> only affects ipfw2 users).
> Move fw_one_pass from ip_fw[2].c to ip_input.c to avoid depending on
> IPFIREWALL."
> 
> I will try this out.
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"