From owner-freebsd-net@FreeBSD.ORG  Wed Mar  5 20:28:06 2014
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 5BEABE3A
 for <freebsd-net@freebsd.org>; Wed,  5 Mar 2014 20:28:06 +0000 (UTC)
Received: from forward7l.mail.yandex.net (forward7l.mail.yandex.net
 [84.201.143.140])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 10B49A41
 for <freebsd-net@freebsd.org>; Wed,  5 Mar 2014 20:28:05 +0000 (UTC)
Received: from smtp16.mail.yandex.net (smtp16.mail.yandex.net [95.108.252.16])
 by forward7l.mail.yandex.net (Yandex) with ESMTP id 46DF3BC0BF6;
 Thu,  6 Mar 2014 00:27:57 +0400 (MSK)
Received: from smtp16.mail.yandex.net (localhost [127.0.0.1])
 by smtp16.mail.yandex.net (Yandex) with ESMTP id E70386A07E6;
 Thu,  6 Mar 2014 00:27:56 +0400 (MSK)
Received: from 84.201.166.137-vpn.dhcp.yndx.net
 (84.201.166.137-vpn.dhcp.yndx.net [84.201.166.137])
 by smtp16.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id lcs27oCBdl-RuI8Zeta; 
 Thu,  6 Mar 2014 00:27:56 +0400
 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits))
 (Client certificate not present)
X-Yandex-Uniq: 91737883-4dab-4c68-90db-3df68436cb3b
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
 t=1394051276; bh=Zp8PltqSlr2V7FxaDg0cwkRjrhbWMpRyRTkaDY3RAt0=;
 h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:
 References:In-Reply-To:X-Enigmail-Version:Content-Type:
 Content-Transfer-Encoding;
 b=dAczDT3A+tO991Ae7z7TEOzp8XgC8O7bw/1cStgJhIgEDOKaUfvqyG6n34N21iuUL
 2LhLW/CZu+Pw1YisjrYaiL3MET+hwGO+blLdFsL9lMaB9pDgTFbVHu3VYsRhNjUoHD
 9TnPL4enLHBtlfOp7lsoSl5nQfmf/SSb6zCF2cdo=
Authentication-Results: smtp16.mail.yandex.net; dkim=pass header.i=@yandex.ru
Message-ID: <531788A7.2040504@yandex.ru>
Date: Thu, 06 Mar 2014 00:27:19 +0400
From: "Andrey V. Elsukov" <bu7cher@yandex.ru>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: Andreas Nilsson <andrnils@gmail.com>
Subject: Re: ipfw / routing issue on 9.2-RELEASE
References: <CAPS9+SsbPsQLqu9mwz7nhcn+jMkkj57JUeHOO3U5xm9eXLYb8g@mail.gmail.com>
 <531771C8.1040207@yandex.ru>
 <CAPS9+StX7Dbrh5dYJN2K_4pimc91L86YWmfWeaZ+gLaEDhWe5A@mail.gmail.com>
In-Reply-To: <CAPS9+StX7Dbrh5dYJN2K_4pimc91L86YWmfWeaZ+gLaEDhWe5A@mail.gmail.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Net <freebsd-net@freebsd.org>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Mar 2014 20:28:06 -0000

On 05.03.2014 23:44, Andreas Nilsson wrote:
> With the above ruleset a packet
> 1) triggering the first rule ( ie skipto no-op and the allow from any to
> any ) is lost.
> 2) triggering the second rule (ie skipto divert rule which returns it to
> the stack ) is forwarded.

So, I don't see in the code how it can affect routing.
Make sure:
1. net.inet.ip.forwarding=1 (gateway_enable="YES" in rc.conf)
2. you have route and gateway is reachable (route get/arp -n).

-- 
WBR, Andrey V. Elsukov