From owner-freebsd-pf@FreeBSD.ORG Thu Jan 13 12:16:16 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9803C16A4CE for ; Thu, 13 Jan 2005 12:16:16 +0000 (GMT) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.177]) by mx1.FreeBSD.org (Postfix) with ESMTP id A4DB143D2D for ; Thu, 13 Jan 2005 12:16:15 +0000 (GMT) (envelope-from max@love2party.net) Received: from [212.227.126.179] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1Cp3td-0005Mr-00; Thu, 13 Jan 2005 13:16:13 +0100 Received: from [217.227.150.51] (helo=donor.laier.local) by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128) (Exim 3.35 #1) id 1Cp3td-0002Ui-00; Thu, 13 Jan 2005 13:16:13 +0100 From: Max Laier To: freebsd-pf@freebsd.org, tyler@neo.tamu.edu Date: Thu, 13 Jan 2005 13:16:00 +0100 User-Agent: KMail/1.7.2 References: <200501130757.j0D7vE5V028776@smtp-relay.tamu.edu> In-Reply-To: <200501130757.j0D7vE5V028776@smtp-relay.tamu.edu> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3425888.IxU8yVtZud"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200501131316.11379.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de auth:61c499deaeeba3ba5be80f48ecc83056 Subject: Re: Bridging + pf in a production environment X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jan 2005 12:16:16 -0000 --nextPart3425888.IxU8yVtZud Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 13 January 2005 08:57, Ballance, Robert T wrote: > Howdy list, > > My university is starting to seriously look into migrating from our > convoluted Slackware Linux + iptables bridging solution to a FreeBSD + pf > bridging solution. > > I've been reading around about it, after the mention by Solarflux about > there being problems currently with bridging with pf on FreeBSD. Which > worries me, he mentioned the option of using OpenBSD, which, is an option, > but whatever we commit to, we're going to commit to for a good couple of > years. (We have been using Slackware for about 2 years thus far) > > Is anybody currently working on bringing of if_bridge from Net/OpenBSD as > Max suggests > (http://lists.freebsd.org/pipermail/freebsd-pf/2005-January/000734.html) > > If not, if anybody could really outline how fixing this problem could be > fixed (past maybe just importing if_bridge) I might be able to convince my > employer to pay me to work on it ;) > (after all, I'm just a measely student worker :P) > > Let me know :) There is somebody working on it, but it is yet unclear how long until we se= e=20 results from that. Meanwhile, you might want to try the patch for bridge.c= =20 from Pyun YongHyeon which improves the situation already:=20 http://www.kr.freebsd.org/~yongari/patches/bridge.patch There might be a newer version of this patch here:=20 http://www.pfsense.org/downloads/bridge.patch.041215 =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart3425888.IxU8yVtZud Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQBB5maLXyyEoT62BG0RAt5CAJ9/dfa6hAVNbWRZFLsMzmB0WbuYgQCeOYbQ jJSvdOwtRYU65/u6+u6/rqM= =vsSa -----END PGP SIGNATURE----- --nextPart3425888.IxU8yVtZud--