From owner-freebsd-pf@FreeBSD.ORG Tue Oct 2 09:34:11 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E208B16A417 for ; Tue, 2 Oct 2007 09:34:11 +0000 (UTC) (envelope-from tobi@casino.uni-stuttgart.de) Received: from out1.smtp.messagingengine.com (out1.smtp.messagingengine.com [66.111.4.25]) by mx1.freebsd.org (Postfix) with ESMTP id B12E913C48A for ; Tue, 2 Oct 2007 09:34:11 +0000 (UTC) (envelope-from tobi@casino.uni-stuttgart.de) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 6593B2FBF3 for ; Tue, 2 Oct 2007 05:34:11 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute1.internal (MEProxy); Tue, 02 Oct 2007 05:34:11 -0400 X-Sasl-enc: WXMIHOhEkkv1pbUArKtt0z67By5hzxZtxHN/tD8tXpBc 1191317651 Received: from [192.168.1.101] (unknown [193.239.254.142]) by mail.messagingengine.com (Postfix) with ESMTP id E9C7E10636 for ; Tue, 2 Oct 2007 05:34:10 -0400 (EDT) Message-ID: <47021088.4090808@casino.uni-stuttgart.de> Date: Tue, 02 Oct 2007 12:34:00 +0300 From: Tobias Ernst User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-AT; rv:1.8.1.6) Gecko/20070802 SeaMonkey/1.1.4 MIME-Version: 1.0 To: freebsd-pf@freebsd.org References: <46EDE839.8060501@criticalmagic.com> <20070917202951.GF2742@heff.fud.org.nz> <46EEE5C9.8050103@criticalmagic.com> <20070917204318.GB9614@heff.fud.org.nz> <4701FAD7.4050600@casino.uni-stuttgart.de> <20071002091610.GD38352@heff.fud.org.nz> In-Reply-To: <20071002091610.GD38352@heff.fud.org.nz> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Subject: Re: Filtering bridge - how to decide which of the bridge's interfaces a packet arrived on? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Oct 2007 09:34:12 -0000 Andrew Thompson schrieb: > Yes, a new option was added to HEAD that allows this (pfil_local_phys), > it adds an additional packet filter call on the member interface for > local packets. > Its not in 6.2 unfortunately but will be MFC'd in time for 6.3 Thank you very much for your quick and very useful response. Hmm, I need to keep "supported" versions of FreeBSD on this machine. I would be willing to go to STABLE now and then go back to 6.3 when it will be released, but going to CURRENT is probably too gross a violation of our policy. I will try the patch from kern/116051 on my 6.2 sources, though. The description says that it has been tested on 6.2, and hopefully 6.3 will be out by the time my setup goes into production. Thanks again! Regards Tobias -- Universität Stuttgart|Fakultät für Architektur und Stadtplanung|casinoIT 70174 Stuttgart Geschwister-Scholl-Straße 24D T +49 (0)711 121-4228 F +49 (0)711 121-4276 E office@casino.uni-stuttgart.de I http://www.casino.uni-stuttgart.de