Date: Thu, 27 Sep 2001 16:07:19 -0700 (PDT) From: Julian Elischer <julian@elischer.org> To: Robert Hough <rch@acidpit.org> Cc: freebsd-hackers@freebsd.org Subject: Re: ng_bridge Message-ID: <Pine.BSF.4.21.0109271605320.65838-100000@InterJet.elischer.org> In-Reply-To: <20010927180203.A23934@acidpit.org>
next in thread | previous in thread | raw e-mail | index | archive | help
BRIDGE/DUMMYNET/net.link.ether.bridge=1/net.link.ether.bridge_ipfw=1 is one set of bridging code ng_bridge is a completely separate (in my opinion, better, but I'm biased) setr of code. they might interract if you turn them both on at the same time.... On Thu, 27 Sep 2001, Robert Hough wrote: > On Thu, Sep 27, 2001, Julian Elischer wrote: > > > well, maybe if you told us what you modified, and what happenned..... > > $ diff /usr/share/examples/netgraph/ether.bridge ~/eth_bridge.sh > 41,42c41,42 > < BRIDGE_IFACES="ed0 fxp0 fxp1" > < LOCAL_IFACE="fxp0" > --- > > BRIDGE_IFACES="vx0 vx1" > > LOCAL_IFACE="" > > As far as what happened, it basically made everything connected to that > hub unreachable by everything else. Other settings are to follow: > > > # kernel config > options BRIDGE > options DUMMYNET > options IPFIREWALL > options IPFIREWALL_DEFAULT_TO_ACCEPT > > # /etc/sysctl.conf > net.link.ether.bridge=1 > net.link.ether.bridge_ipfw=1 > > No interface was configured with an IP address on the box at the time. > The only ipfirewall rule in use was the default_accept. Thanks. > > -- > Robert Hough (rch@acidpit.org) > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0109271605320.65838-100000>