Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Sep 2001 18:02:03 -0400
From:      Robert Hough <rch@acidpit.org>
To:        Julian Elischer <julian@elischer.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: ng_bridge
Message-ID:  <20010927180203.A23934@acidpit.org>
In-Reply-To: <Pine.BSF.4.21.0109271539240.65838-100000@InterJet.elischer.org>; from julian@elischer.org on Thu, Sep 27, 2001 at 15:39:45 -0700
References:  <20010927165304.C23689@acidpit.org> <Pine.BSF.4.21.0109271539240.65838-100000@InterJet.elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 27, 2001, Julian Elischer wrote:

> well, maybe if you told us what you modified, and what happenned.....

$ diff /usr/share/examples/netgraph/ether.bridge ~/eth_bridge.sh
41,42c41,42
< BRIDGE_IFACES="ed0 fxp0 fxp1"
< LOCAL_IFACE="fxp0"
---
> BRIDGE_IFACES="vx0 vx1"
> LOCAL_IFACE=""

As far as what happened, it basically made everything connected to that
hub unreachable by everything else. Other settings are to follow:


# kernel config
options		BRIDGE
options		DUMMYNET
options		IPFIREWALL
options		IPFIREWALL_DEFAULT_TO_ACCEPT

# /etc/sysctl.conf
net.link.ether.bridge=1
net.link.ether.bridge_ipfw=1

No interface was configured with an IP address on the box at the time.
The only ipfirewall rule in use was the default_accept. Thanks.

-- 
Robert Hough (rch@acidpit.org)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010927180203.A23934>