Date: Fri, 12 May 2006 21:51:38 +0200 (CEST) From: Goran Gajic <ggajic@afrodita.rcub.bg.ac.yu> To: freebsd-current@www.freebsd.org Subject: bug or a feature of ipfw2? Message-ID: <Pine.LNX.4.63.0605122143580.16829@afrodita.rcub.bg.ac.yu>
next in thread | raw e-mail | index | archive | help
Hi, I don't know if this is normal behaviour: fbsd# arp -a fbsd (192.168.1.1) at 00:14:85:22:8f:62 on sk0 permanent [ethernet] enterprise (192.168.1.2) at 00:0d:88:6e:6d:b4 on sk0 [ethernet] fbsd# kldload ipfw.ko fbsd# kldload dummynet.ko fbsd# sysctl -n net.link.ether.ipfw=1 0 -> 1 fbsd# ipfw add 100 permit ip from any to any 00100 allow ip from any to any fbsd# ping 192.168.1.2 PING 192.168.1.2 (192.168.1.2): 56 data bytes 64 bytes from 192.168.1.2: icmp_seq=0 ttl=64 time=0.362 ms 64 bytes from 192.168.1.2: icmp_seq=1 ttl=64 time=0.260 ms ^C --- 192.168.1.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.260/0.311/0.362/0.051 ms fbsd# ipfw delete 100 fbsd# ipfw add 100 permit ip from any to any MAC any any 00100 allow ip from any to any MAC any any fbsd# ping 192.168.1.2 PING 192.168.1.2 (192.168.1.2): 56 data bytes ping: sendto: Permission denied ping: sendto: Permission denied ^C --- 192.168.1.2 ping statistics --- 2 packets transmitted, 0 packets received, 100% packet loss So my question is: if I select dst and src MAC to any shouldn't ipfw let me pass? I've got same result when I've tried ipfw add 100 permit MAC 00:0d:88:6e:6d:b4 any ipfw add 100 permit MAC any 00:14:85:22:8f:62 fbsd# uname -a FreeBSD fbsd 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Sat May 6 19:29:12 CEST 2006 GENERIC config. sk0 is NIC on both machines. Regards, gg.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.63.0605122143580.16829>