Date: Fri, 15 Oct 2004 13:53:02 -0500 From: Andrew Friedley <saai@uni.edu> To: freebsd-ipfw@freebsd.org Subject: ipfw with bridging Message-ID: <20041015185302.GA27894@thor>
next in thread | raw e-mail | index | archive | help
I am looking into using ipfw and bridging on freebsd as an alternative to ebtables and bridging on linux. What i need to do is to be able to drop or accept packets based on the interface they came in on, the interface they are going out on, and their source mac address. Matching on source mac addresses is no problem, nor is matching on the interface a packet comes in on. However, i am unable to write a rule that matches packets going out on a specific interface. Is this possible? I want do do something like the following, but the rule does not match any packets: ipfw add 100 count all from any to any out via xl2 layer2 -- Andrew Friedley Programmer, ITS Network Services University of Northern Iowa
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041015185302.GA27894>