Date: Fri, 24 Feb 2006 06:30:53 -0300 From: JoaoBR <joao@matik.com.br> To: Hajimu UMEMOTO <ume@freebsd.org> Cc: freebsd-ipfw@freebsd.org Subject: Re: kern/93422: Re: ipfw divert rule Message-ID: <200602240630.53797.joao@matik.com.br> In-Reply-To: <ygelkw58dl9.wl%ume@mahoroba.org> References: <200602200300.k1K30TZr050863@freefall.freebsd.org> <200602201721.50781.joao@matik.com.br> <ygelkw58dl9.wl%ume@mahoroba.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 21 February 2006 02:50, Hajimu UMEMOTO wrote:
> joao> same reason why "... pipe proto ip in|out" does not pipe any more,
> right?
>
> Yes.
>
in addition to our "proto" talk. omitting "proto" in the rule the rule as in
ipfw add deny dst-ip ${IP} recv ${NIC}
works, but this
ipfw add deny proto ip dst-ip ${IP} recv ${NIC}
does not
so would something as
ipfw add 1000 divert 8669 dst-ip 0.0.0.0 src-ip 0.0.0.0
work than?
How should I rewrite my rules or better regressing to the old "ip from any to
any" ?
thank's
Joćo
A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602240630.53797.joao>