From owner-freebsd-net@FreeBSD.ORG Mon May 10 11:30:22 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 80C0116A4CE for ; Mon, 10 May 2004 11:30:22 -0700 (PDT) Received: from relais.videotron.ca (relais.videotron.ca [24.201.245.36]) by mx1.FreeBSD.org (Postfix) with ESMTP id 15B2C43D41 for ; Mon, 10 May 2004 11:30:22 -0700 (PDT) (envelope-from erob@videotron.ca) Received: from videotron.ca ([24.202.95.92]) by VL-MO-MR010.ip.videotron.ca (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) with ESMTP id <0HXI00236JIOI5@VL-MO-MR010.ip.videotron.ca> for freebsd-net@freebsd.org; Mon, 10 May 2004 14:30:24 -0500 (EST) Date: Mon, 10 May 2004 14:32:05 -0400 From: Etienne Robillard To: freebsd-net@freebsd.org Message-id: <409FCAA5.5000504@videotron.ca> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en User-Agent: Mozilla Thunderbird 0.5 (X11/20040406) X-Enigmail-Version: 0.83.6.0 X-Enigmail-Supports: pgp-inline, pgp-mime Subject: bridging and promiscuous mode... works but can"t get packets back X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 May 2004 18:30:22 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi I am quite new to this list :) Context: There's a bridge that does one logical net for two nics (vr0,rl0) on the same box (freebsd-4.10-prerelease). vr0 = outsite net (isp connected with dhclient) rl0 = inside net (192.168.1.1) connected with a 10BaseT/UTP cable. The module in use is bridge.ko and ipfw is in use by the bridge. Moreover, there's two servers (dhcpd/dnscache) that do dhcp and name-resolution on 192.168.1.1 (rl0). Question: Why promiscuous-mode enabled interfaces routes packets outbound successfully but not inbound ?? That is, why the private host can lookup addresses, but fails to receive back tcp packets from the internet ? any ideas ? I would really much appreciate any kinds of comments or hints concerning this scenario... Thanks Etienne -----BEGIN PGP SIGNATURE----- Comment: quork teht! iD8DBQFAn8qlfhO/J4JSDfYRAkdFAJ0SgLdUw4YIp2fUcfirDnhg+C2nkQCePaSW NlICsDs/Rj2vySR3ikJjmvs= =5O1W -----END PGP SIGNATURE-----