From owner-freebsd-questions@FreeBSD.ORG Mon May 3 02:19:27 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D3A0616A4DB for ; Mon, 3 May 2004 02:19:27 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 356DF43D46 for ; Mon, 3 May 2004 02:19:26 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1])i439JKeT007689 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 3 May 2004 10:19:20 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)id i439JK9e007688; Mon, 3 May 2004 10:19:20 +0100 (BST) (envelope-from matthew) Date: Mon, 3 May 2004 10:19:20 +0100 From: Matthew Seaman To: Rob Message-ID: <20040503091920.GA7426@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , Rob , freebsd-questions@freebsd.org References: <4096080E.50803@users.sourceforge.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh" Content-Disposition: inline In-Reply-To: <4096080E.50803@users.sourceforge.net> User-Agent: Mutt/1.5.6i X-Virus-Scanned: clamd / ClamAV version devel-20040420, clamav-milter version 0.70k X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-questions@freebsd.org Subject: Re: ipfw and MAC-keyword: "unknown arg"; but it is in man page! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 May 2004 09:19:28 -0000 --NzB8fVQJ5HfG6fxh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 03, 2004 at 05:51:26PM +0900, Rob wrote: > With my ipfw firewall, I try to use the MAC keyword, as explained > in the ipfw man page: > But to no avail: >=20 > # ipfw add 900 allow udp from any to any MAC 00:a0:b0:0e:3a:95 any > ipfw: unknown argument ``MAC'' > # >=20 > Is this a bug, or what? That's definitely a 'what'. MAC header filtering is an IPFW2 feature and that has to be enabled specially on 4-STABLE. Read the sections in ipfw(8) called "IPFW2 ENHANCEMENTS" and then follow the instructions in the section "USING IPFW2 IN FreeBSD-STABLE" Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --NzB8fVQJ5HfG6fxh Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAlg6YdtESqEQa7a0RAoLdAJ9GzVrBOHZI3vWGlLcmX/TEWhgHagCggLP4 /7PW6HPMZaUKwta3R3ibJyE= =rZQg -----END PGP SIGNATURE----- --NzB8fVQJ5HfG6fxh--