Date: Mon, 6 Apr 2009 20:54:47 +0300 From: Maxim Ignatenko <gelraen.ua@gmail.com> To: freebsd-current@freebsd.org Subject: Re: [patch] matching IPv4 broadcast packets in ipfw Message-ID: <ac42db050904061054x265d0289xb3d5eb15bc4c86ea@mail.gmail.com> In-Reply-To: <ac42db050904060448v5aa7e4b0q9ee9e85b3c26f129@mail.gmail.com> References: <ac42db050904060448v5aa7e4b0q9ee9e85b3c26f129@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Strange, but packet
TCP 88.222.53.231:55882 192.168.100.2:44943 out via gif0
matched the rule
allow log ip from any to any broadcast
ifconfig gif0
gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1280
tunnel inet x.x.x.x --> x.x.x.x
inet 192.168.100.1 --> 192.168.100.2 netmask 0xfffffffc
I thougth it should not be matched because gif0 has not set
IFF_BROADCAST in if_flags
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ac42db050904061054x265d0289xb3d5eb15bc4c86ea>