From owner-freebsd-bugs@freebsd.org Sat May 8 12:30:19 2021 Return-Path: Delivered-To: freebsd-bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 8553563444E for ; Sat, 8 May 2021 12:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 4Fcmqb3Bc8z4qVX for ; Sat, 8 May 2021 12:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id 6D91D634072; Sat, 8 May 2021 12:30:19 +0000 (UTC) Delivered-To: bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6D554634253 for ; Sat, 8 May 2021 12:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Fcmqb2ZZnz4qff for ; Sat, 8 May 2021 12:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 41BC01EC98 for ; Sat, 8 May 2021 12:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 148CUJL7055737 for ; Sat, 8 May 2021 12:30:19 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 148CUJZm055736 for bugs@FreeBSD.org; Sat, 8 May 2021 12:30:19 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 255705] Is 'ipfw fwd' completely broken now? Date: Sat, 08 May 2021 12:30:19 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: bugs.freebsd.org@mx.zzux.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 May 2021 12:30:19 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255705 Bug ID: 255705 Summary: Is 'ipfw fwd' completely broken now? Product: Base System Version: 13.0-RELEASE Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: bugs.freebsd.org@mx.zzux.com In addition to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D245277 on 13-0.RELEASE routing table is fully ignored by ipfw fwd. Example: route -4 add default 192.168.68.64 (is a gateway which rejects all) route -4 add -host 169.254.1.1 192.168.68.1 (is a real gateway) Routing tables Internet: Destination Gateway Flags Use Mtu Netif Exp= ire default 192.168.68.64 UGS 26 1500 lan1 127.0.0.1 link#3 UH 2589737 16384 lo0 169.254.1.1 192.168.68.1 UGHS 18 1500 lan1 192.168.68.0/24 link#1 U 8126264 1500 lan1 192.168.68.125 link#1 UHS 0 16384 lo0 ipfw table 8 add 8.8.8.8 169.254.1.1 ipfw add 8 fwd tablearg ip from any to table(8) ipfw add 9 fwd 169.254.1.1 ip from any to 8.8.4.4 ipfw add 10 fwd 192.168.68.1 ip from any to 1.1.1.1 on 10.3-RELEASE (and up to 11.2-RELEASE) PING 5.5.5.5 (5.5.5.5): 56 data bytes 36 bytes from 192.168.68.64: Destination Host Unreachable Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 0054 5ac8 0 0000 3f 01 11b2 192.168.68.125 5.5.5.5 but 64 bytes from 8.8.8.8: icmp_seq=3D0 ttl=3D106 time=3D17.876 ms 64 bytes from 8.8.4.4: icmp_seq=3D0 ttl=3D109 time=3D16.055 ms 64 bytes from 1.1.1.1: icmp_seq=3D0 ttl=3D54 time=3D23.887 ms on 13.0-RELEASE it forwards all the destinations via default gw PING 1.1.1.1 (1.1.1.1): 56 data bytes 36 bytes from 192.168.68.64: Destination Host Unreachable Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 0054 b346 0 0000 3f 01 c3d5 192.168.68.125 1.1.1.1 --=20 You are receiving this mail because: You are the assignee for the bug.=