From owner-freebsd-net@FreeBSD.ORG  Sat Nov 20 01:29:56 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7331C16A4CF
	for <net@freebsd.org>; Sat, 20 Nov 2004 01:29:56 +0000 (GMT)
Received: from neo.redjade.org (neo.redjade.org [219.254.21.62])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2644943D4C
	for <net@freebsd.org>; Sat, 20 Nov 2004 01:29:55 +0000 (GMT)
	(envelope-from ssw@neo.redjade.org)
Received: from neo.redjade.org (localhost [127.0.0.1])
	by neo.redjade.org (8.13.1/8.13.1) with ESMTP id iAK1UHqi069278;
	Sat, 20 Nov 2004 10:30:17 +0900 (KST)
	(envelope-from ssw@neo.redjade.org)
Received: (from ssw@localhost)
	by neo.redjade.org (8.13.1/8.13.1/Submit) id iAK1UG08069277;
	Sat, 20 Nov 2004 10:30:16 +0900 (KST)
	(envelope-from ssw)
Date: Sat, 20 Nov 2004 10:30:16 +0900
From: Sangwoo Shim <ssw@neo.redjade.org>
To: Chuck Swiger <cswiger@mac.com>
Message-ID: <20041120013016.GA69112@neo.redjade.org>
References: <BAY24-F203179185F6D96B66806CECCC30@phx.gbl>
	<419E3907.8000904@mac.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=euc-kr
Content-Disposition: inline
In-Reply-To: <419E3907.8000904@mac.com>
User-Agent: Mutt/1.5.4i
cc: net@freebsd.org
Subject: Re: using natd to load balance port 80 to multiple servers
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Nov 2004 01:29:56 -0000

On Fri, Nov 19, 2004 at 01:18:47PM -0500, Chuck Swiger wrote:
> 
> I will repeat my suggestion that you use a real IP on your webserver and 
> switch from doing PF + NAT to doing PF or IPFW + bridging instead.

Is it possible (in -current of RELENG_5) to filter bridged packets using PF?
I know I can do with ipfw/ipf by setting net.link.ether.bridge_ipfw=1 or
net.link.ether.bridge_ipf=1. But I cannot find net.link.ether.bridge_pf or the
like.

Regards,
Sangwo Shim