From owner-freebsd-net  Wed Mar 28  9: 0:16 2001
Delivered-To: freebsd-net@freebsd.org
Received: from InterJet.dellroad.org (adsl-63-194-81-26.dsl.snfc21.pacbell.net [63.194.81.26])
	by hub.freebsd.org (Postfix) with ESMTP id 97E9B37B71A
	for <freebsd-net@FreeBSD.ORG>; Wed, 28 Mar 2001 09:00:09 -0800 (PST)
	(envelope-from archie@dellroad.org)
Received: from arch20m.dellroad.org (arch20m.dellroad.org [10.1.1.20])
	by InterJet.dellroad.org (8.9.1a/8.9.1) with ESMTP id IAA45033;
	Wed, 28 Mar 2001 08:52:45 -0800 (PST)
Received: (from archie@localhost)
	by arch20m.dellroad.org (8.11.1/8.11.1) id f2SGq6D47085;
	Wed, 28 Mar 2001 08:52:06 -0800 (PST)
	(envelope-from archie)
From: Archie Cobbs <archie@dellroad.org>
Message-Id: <200103281652.f2SGq6D47085@arch20m.dellroad.org>
Subject: Re: netgraph ng_bridge and ipfilter
In-Reply-To: <200103280444.GAA89371@info.iet.unipi.it> "from Luigi Rizzo at Mar
 28, 2001 06:44:30 am"
To: Luigi Rizzo <luigi@info.iet.unipi.it>
Date: Wed, 28 Mar 2001 08:52:06 -0800 (PST)
Cc: Julian Elischer <julian@elischer.org>,
	Archie Cobbs <archie@dellroad.org>, Peter.Blok@inter.NL.net,
	freebsd-net@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL82 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Luigi Rizzo writes:
> > > in this case, this person seemed to _need_ the interaction in
> > > order to have a bridging firewall
> > 
> > that would be a brouter and not a bridge..Filering on IP at link layer..
> > yuck.
> > 
> > It's really a crime against humanity but then that's never stopped
> 
> It's just a damn useful thing when you have to protect a network
> withouth having to replace a router (which might not even be there)
> or reassign addresses, and the fact you can do that in FreeBSD is
> a big selling point for FreeBSD's native bridging.

The customer is always right... :-)

-Archie

__________________________________________________________________________
Archie Cobbs     *     Packet Design     *     http://www.packetdesign.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message