From owner-freebsd-questions  Thu Jun 26 17:55:21 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id RAA23838
          for questions-outgoing; Thu, 26 Jun 1997 17:55:21 -0700 (PDT)
Received: from shell.firehouse.net (brian@shell.firehouse.net [209.42.203.51])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id RAA23829
          for <questions@FreeBSD.ORG>; Thu, 26 Jun 1997 17:55:17 -0700 (PDT)
Received: from localhost (brian@localhost)
	by shell.firehouse.net (8.8.5/8.8.5) with SMTP id UAA22957;
	Thu, 26 Jun 1997 20:54:27 -0400 (EDT)
Date: Thu, 26 Jun 1997 20:54:26 -0400 (EDT)
From: Brian Mitchell <brian@firehouse.net>
To: Bernie Doehner <bad@uhf.wireless.net>
cc: Alejandro Galindo Chairez <agalindo@asimov.io.com.mx>,
        questions@FreeBSD.ORG
Subject: Re: ipfw: setsockopt failed
In-Reply-To: <Pine.BSF.3.95.970626200931.701B-100000@uhf.wdc.net>
Message-ID: <Pine.BSI.3.95.970626205218.22914A-100000@shell.firehouse.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

[isp and hackers removed from distribution]

On Thu, 26 Jun 1997, Bernie Doehner wrote:

> > 
> > ipfw add divert 32000 ip from any to any via ed1     for example
> > 
> > the system send me the message
> > 
> > 00000 divert 32000 ip from any to any via ed1
> > ipfw: setsockopt(IP_FW_ADD): Invalid argument 
> 
> via is a legal keyword?
> 
> Bernie
> 
> 

Yes. From the manpage:

If ``via'' name is specified, only packets received via or on their way
out of an interface matching name will match this rule.

If ``via'' ipno is specified, only packets received via or on their way
out of an interface having the address ipno will match this rule.


Brian Mitchell                                  brian@firehouse.net
"BSD code sucks. Of course, everything else sucks far more."
- Theo de Raadt