From owner-freebsd-security Sat Feb 23 15:58:41 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx0.mail.uk.easynet.net (mx0.mail.uk.easynet.net [195.40.1.39]) by hub.freebsd.org (Postfix) with ESMTP id AB54737B400 for ; Sat, 23 Feb 2002 15:58:35 -0800 (PST) Received: from dial2.mail.uk.easynet.net ([195.40.1.235]) by mx0.mail.uk.easynet.net with smtp (Exim 3.33 #4) id 16elzU-000H5Y-00 for freebsd-security@FreeBSD.ORG; Sat, 23 Feb 2002 23:54:08 +0000 Received: (qmail 25378 invoked from network); 23 Feb 2002 23:58:29 -0000 Received: from fish.nerds.org.uk (HELO fish) ([217.204.218.162]) (envelope-sender ) by dial2.mail.uk.easynet.net (qmail-ldap-1.03) with SMTP; 23 Feb 2002 23:58:29 -0000 Message-ID: <002b01c1bcc6$a952b1c0$a2daccd9@nerds.org.uk> From: "Lee Brotherston" To: "'freebsd-security@freebsd.org'" Subject: ipf transparently Date: Sun, 24 Feb 2002 00:03:17 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Apologies in advance if I'm missing something really obvious here. But I've setup my FreeBSD box to be a bridge, and has both ipfw and ipf compiled into the kernel. The bridging works perfectly and if I set the following using sysctl I can filter the bridged traffic with ipfw fine. net.link.ether.bridge_ipfw: 1 However I have not been able to find where to set a similar option to allow ipf to filter the traffic. I tried just applying some rules incase, and they had no effect. Any ideas more than welcome ;) Thanks Lee To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message