From owner-freebsd-ipfw@FreeBSD.ORG  Thu Sep  1 07:12:34 2005
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
X-Original-To: freebsd-ipfw@FreeBSD.org
Delivered-To: freebsd-ipfw@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5C08816A41F
	for <freebsd-ipfw@FreeBSD.org>; Thu,  1 Sep 2005 07:12:34 +0000 (GMT)
	(envelope-from glebius@FreeBSD.org)
Received: from cell.sick.ru (cell.sick.ru [217.72.144.68])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A44B143D46
	for <freebsd-ipfw@FreeBSD.org>; Thu,  1 Sep 2005 07:12:33 +0000 (GMT)
	(envelope-from glebius@FreeBSD.org)
Received: from cell.sick.ru (glebius@localhost [127.0.0.1])
	by cell.sick.ru (8.13.3/8.13.3) with ESMTP id j817CRmj099185
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Thu, 1 Sep 2005 11:12:28 +0400 (MSD)
	(envelope-from glebius@FreeBSD.org)
Received: (from glebius@localhost)
	by cell.sick.ru (8.13.3/8.13.1/Submit) id j817CRsX099184;
	Thu, 1 Sep 2005 11:12:27 +0400 (MSD)
	(envelope-from glebius@FreeBSD.org)
X-Authentication-Warning: cell.sick.ru: glebius set sender to
	glebius@FreeBSD.org using -f
Date: Thu, 1 Sep 2005 11:12:27 +0400
From: Gleb Smirnoff <glebius@FreeBSD.org>
To: Ganbold <ganbold@micom.mng.net>
Message-ID: <20050901071227.GR86630@cell.sick.ru>
References: <6.2.1.2.2.20050830190113.035378e0@202.179.0.80>
	<20050830111049.GK60614@cell.sick.ru>
	<6.2.1.2.2.20050831173013.0355eaf0@202.179.0.80>
	<20050831092848.GI60614@cell.sick.ru>
	<6.2.1.2.2.20050901124651.0357db30@202.179.0.80>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
In-Reply-To: <6.2.1.2.2.20050901124651.0357db30@202.179.0.80>
User-Agent: Mutt/1.5.6i
Cc: freebsd-ipfw@FreeBSD.org
Subject: Re: ng_netflow and bridging firewall
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Sep 2005 07:12:34 -0000

On Thu, Sep 01, 2005 at 12:55:09PM +0900, Ganbold wrote:
G> Thanks for reply. However as long as I run ngctl commands to create the 
G> graph in order to catch both outgoing and incoming
G> traffic ipfw started work abnormally. Basically all my customers complained 
G> that they couldn't connect to Internet.
G> Because I'm running bridge firewall, is this due to ng_ether and bridge(4) 
G> bug you mentioned? Or it is something else?

Very probably.

G> Where can I find the bug info?

In CVS log for revision 1.85 of src/sys/net/bridge.c

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE