Date: Wed, 19 Nov 2003 10:58:02 -0500 From: Russell Sutherland <russ@madhaus.cns.utoronto.ca> To: freebsd-ipfw@freebsd.org Subject: ipfw fwd question Message-ID: <20031119155802.GH21513@madhaus.cns.utoronto.ca>
next in thread | raw e-mail | index | archive | help
I am currently using the ipfw fwd rule action to perform
source based policy routing.
Specifically I'm fwd'ing traffic that has come in on intf1 and
is going out intf2. (The reason the traffic is normally heading out
this interface is its the interface for the default route).
As the packet is going out, I forward it, which causes it
to be sent to another machine on the same LAN as attached
to intf1.
So the packet:
- comes in on intf1
- traverses the routing table
- matches the default route (whose next hop is out intf2)
- goes out on intf2
- gets fwd'ed to IP1 (whose next hop is back out intf1)
This all works fine... except the fwd rule seems to only count
the first forwarded packet. I'm testing the routing/fwding using
ping from a remote machine. tcpdump indicates that each packet
is being sent from the test machine to intf1. (Rather than getting
a redirect from my router/firewall).
Any ideas as to why the count is not being incremented correctly?
--
Russell P. Sutherland Email: russ @ madhaus.cns.utoronto.ca
4 Bancroft Ave., Rm. 102 Voice: +1.416.978.0470
University of Toronto Fax: +1.416.978.6620
Toronto, ON M5S 1C1 WWW: http://madhaus.cns.utoronto.ca/~russ
CANADA
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031119155802.GH21513>