From owner-freebsd-pf@FreeBSD.ORG  Fri Aug 12 15:51:51 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 21CF016A41F
	for <freebsd-pf@freebsd.org>; Fri, 12 Aug 2005 15:51:51 +0000 (GMT)
	(envelope-from max@love2party.net)
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.187])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 806DF43D45
	for <freebsd-pf@freebsd.org>; Fri, 12 Aug 2005 15:51:50 +0000 (GMT)
	(envelope-from max@love2party.net)
Received: from p54A3EAE3.dip.t-dialin.net [84.163.234.227]
	(helo=donor.laier.local)
	by mrelayeu.kundenserver.de with ESMTP (Nemesis),
	id 0MKwh2-1E3bov3VVA-0008HE; Fri, 12 Aug 2005 17:51:45 +0200
From: Max Laier <max@love2party.net>
To: freebsd-pf@freebsd.org
Date: Fri, 12 Aug 2005 17:51:15 +0200
User-Agent: KMail/1.8.2
References: <1123858936.22864.252.camel@torgau.office.netline.net.uk>
	<1123861547.22864.256.camel@torgau.office.netline.net.uk>
In-Reply-To: <1123861547.22864.256.camel@torgau.office.netline.net.uk>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart1593939.JSmLmUunit";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200508121751.27737.max@love2party.net>
X-Provags-ID: kundenserver.de abuse@kundenserver.de
	login:61c499deaeeba3ba5be80f48ecc83056
Cc: 
Subject: Re: Bridge and PF
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Aug 2005 15:51:51 -0000

--nextPart1593939.JSmLmUunit
Content-Type: text/plain;
  charset="iso-8859-6"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Friday 12 August 2005 17:45, Rod wrote:
> Found my answer :
>
> http://lists.freebsd.org/mailman/htdig/freebsd-pf/2005-April/000984.html
>
> >FreeBSD has no support for pf in its bridge code.
> >Neither has it IPv6 support.

This is not true.  As Scott suggested try if_bridge in 6.0 which has both I=
Pv6=20
and full pf support.  Additionally, pf is supported by the old bridge just=
=20
use the same settings you would use for ipf.  The old bridge does not allow=
=20
for stateful filtering however.  The same is true for ipf and ipfw with the=
=20
old bridge code.

> On Fri, 2005-08-12 at 16:02, Rod wrote:
> > Hi,
> >
> > Does anyone know if their is a setting similar to that of ipf and ipfw
> > for setting bridged devices to use a firewall in sysctl e.g.
> >
> > for ipfw:
> >
> > net.link.ether.bridge.ipfw=3D1
> >
> > for ipf
> >
> > net.link.ether.bridge.ipfw=3D1
> >
> > Guessed at net.link.ether.bridge.pf=3D1 but no such luck. Is this at all
> > possible with PF on freebsd?
> >
> > kind regards
> >
> > Rod

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1593939.JSmLmUunit
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQBC/MV/XyyEoT62BG0RAmEwAJ9IFbqWCzG9r7PCWHvuaatcdA7K7QCdEHg+
ap0DyjTAkckhX8zO+dVG5I8=
=sPh0
-----END PGP SIGNATURE-----

--nextPart1593939.JSmLmUunit--