From owner-freebsd-net@FreeBSD.ORG Fri Mar 11 11:04:16 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 042FF1065670 for ; Fri, 11 Mar 2011 11:04:16 +0000 (UTC) (envelope-from rajkumars@gmail.com) Received: from mail-fx0-f54.google.com (mail-fx0-f54.google.com [209.85.161.54]) by mx1.freebsd.org (Postfix) with ESMTP id 8C8248FC08 for ; Fri, 11 Mar 2011 11:04:15 +0000 (UTC) Received: by fxm11 with SMTP id 11so1028822fxm.13 for ; Fri, 11 Mar 2011 03:04:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=QRr2LvsKVbfhm4N+5YRuXbYkaRncWrVWBeXsrIutaFo=; b=MDKbjb47tsaIdycgACRS+P5BgN8Us6Dr9ohWfxtw/9BuPEcqk/y/euWCXYO/778N4T TukEq9aCXnB3epLCEgl9mMMhHm0f+v09XeDySPP2iYCuo0eo8K/OGoqYLsO3tyPwHiYf 9MxILsTTVnoHuu8Uafsbch+SrgJsUi2PuT974= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=OrZt4b3YeFy0r/JRCwvXpf5t3GKZYFXdu3qGoW87sMdfN937VaribiaW8VTv64OF4h AP/FtAgolwIqMu43XzGf3I7qD6fAdIgsXYKYMb0cj4ePVcIqVYYQ/g1iGw67+6D/c2YF R6Fi8XXY32ge16Me6aKYZW7ZdAu/fyOAhCAfU= MIME-Version: 1.0 Received: by 10.223.143.16 with SMTP id s16mr894177fau.57.1299841451835; Fri, 11 Mar 2011 03:04:11 -0800 (PST) Received: by 10.223.103.11 with HTTP; Fri, 11 Mar 2011 03:04:11 -0800 (PST) In-Reply-To: <4D78A8B3.6010901@freebsd.org> References: <4D78A8B3.6010901@freebsd.org> Date: Fri, 11 Mar 2011 16:34:11 +0530 Message-ID: From: Rajkumar S To: freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8 Subject: Re: IP_BINDANY: return packets not accepted by kernel X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2011 11:04:16 -0000 Hi, Thanks, it's working! raj On Thu, Mar 10, 2011 at 4:02 PM, Julian Elischer wrote: > yes, you are missing the fact that the return packets will never be accepted > unless you have an ipfw rule saying: > > fwd localhost ip from any to any uid {uid of your process} in recv {your > interface}