From owner-freebsd-ipfw@FreeBSD.ORG Mon Oct 4 15:12:00 2010 Return-Path: Delivered-To: ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 641631065693 for ; Mon, 4 Oct 2010 15:12:00 +0000 (UTC) (envelope-from dudu.meyer@gmail.com) Received: from mail-fx0-f54.google.com (mail-fx0-f54.google.com [209.85.161.54]) by mx1.freebsd.org (Postfix) with ESMTP id EF9228FC12 for ; Mon, 4 Oct 2010 15:11:59 +0000 (UTC) Received: by fxm9 with SMTP id 9so4269466fxm.13 for ; Mon, 04 Oct 2010 08:11:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=K7HZb28G4yfAJhLfdqgHh8lwN9WLu2Fl8NH3JRMzDjk=; b=YH+ydeM/Wum6NwEAJFEZCcezLkeDfbUJkEbRtjxOf35kYOAEZSSpOZ+8zrZH/Botc9 pXGcVUyQfEZ32UKbsUK8tqvYH16xVZAJBwULPLW3vhP05pjLfURgsPVIgp1WlfHfJm29 1UQu/+l4bMa+RuAKG8L/n6y3l/JqurTWYABFs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=N0AYZcqxudTrHotMBbzkAWhgeiMedlJ8cbzPmmQ7E7zLDhzhJnmCw8bS7O8fMhcJT4 w1f1ymcS0tbCVItHmA1F+84kCJf1iv07K28pr3Jvx0CxFJ15n9sffzWnp1g3SqPsr6lf xw+QNRSgd1I9QS3t3y2dzhAnkaorsRaimwqeA= MIME-Version: 1.0 Received: by 10.223.110.142 with SMTP id n14mr5472292fap.38.1286203450883; Mon, 04 Oct 2010 07:44:10 -0700 (PDT) Received: by 10.223.35.203 with HTTP; Mon, 4 Oct 2010 07:44:10 -0700 (PDT) Date: Mon, 4 Oct 2010 11:44:10 -0300 Message-ID: From: Eduardo Meyer To: ipfw@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Cc: Subject: layer2 ipfw 'fwd' support X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Oct 2010 15:12:00 -0000 Hello, In the past I have used this patch by Luigi Rizzo, which helped me well. http://lists.freebsd.org/pipermail/freebsd-ipfw/2003-September/000526.html I tried with a friend to port it to -STABLE, but we were not able to find out what has replaced mt_tag. Also on ip_input.c we dirty hacked to following piece of code: #ifdef IPFIREWALL_FORWARD if (m->m_flags & M_FASTFWD_OURS) { m->m_flags &= ~M_FASTFWD_OURS; goto pass; /* XXX was 'ours' - SHOULD WE MODIFY IT HERE */ } if ((dchg = (m_tag_find(m, PACKET_TAG_IPFORWARD, NULL) != NULL)) != 0) { /* * Directly ship the packet on. This allows forwarding * packets originally destined to us to some other directly * connected host. */ ip_forward(m, dchg); return; } #endif /* IPFIREWALL_FORWARD */ And this is something we are not sure if its correct. So my very obvious question is: Does anyone has a recent version of this patch to share? Can anyone familiar with ipfw source code help me with that? -- =========== Eduardo Meyer pessoal: dudu.meyer@gmail.com profissional: ddm.farmaciap@saude.gov.br