From owner-freebsd-pf@FreeBSD.ORG Mon Jun 13 17:40:23 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 34E2916A427; Mon, 13 Jun 2005 17:40:23 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id EC7D043D48; Mon, 13 Jun 2005 17:40:22 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1]) by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id j5DHeMbW001229; Mon, 13 Jun 2005 10:40:22 -0700 Received: (from brdavis@localhost) by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id j5DHeM3r001228; Mon, 13 Jun 2005 10:40:22 -0700 Date: Mon, 13 Jun 2005 10:40:22 -0700 From: Brooks Davis To: gtg062h@mail.gatech.edu Message-ID: <20050613174022.GA988@odin.ac.hmc.edu> References: <7c8f2792050613090040c924c3@mail.gmail.com> <20050613165202.51063DA@gw2.local.net> <7c8f27920506131035841d5d0@mail.gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="FL5UXtIhxfXey3p5" Content-Disposition: inline In-Reply-To: <7c8f27920506131035841d5d0@mail.gmail.com> User-Agent: Mutt/1.4.1i X-Virus-Scanned: by amavisd-new X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu Cc: freebsd-net@freebsd.org, Greg Hennessy , freebsd-pf@freebsd.org Subject: Re: Carp Suppression X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jun 2005 17:40:23 -0000 --FL5UXtIhxfXey3p5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jun 13, 2005 at 01:35:12PM -0400, Josh Kayse wrote: > On 6/13/05, Greg Hennessy wrote: > > > We then use > > > ifstaded to monitor the carp interfaces and shut down > > > bridging on one of the machines. > >=20 > > Spanning tree is a no brainer for such a setup, pfsync takes care of the > > rest. > >=20 > We did not want to go with STP because it would not be a self > contained solution. Now we can use these firewalls anywhere without > having to modify any routers, just plug them in inline and it is set.=20 > We also wanted to stick with FreeBSD because we have a knowledgebase > already set up for it and we know how to use it. Unfortunately, there > is no support for STP in freebsd bridging. Yes, I had already looked > into using pfsync and STP, we also considered just using scripts. FYI, we have STP via if_bridge in 6.x. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --FL5UXtIhxfXey3p5 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFCrcUFXY6L6fI4GtQRAjX0AKCLj6msFZs4G4rly1LOn2BbElTfMACaAj2Y 4uClrUNSqmQwh9S6yFqD4As= =6XH+ -----END PGP SIGNATURE----- --FL5UXtIhxfXey3p5--