Date: Fri, 24 Feb 2006 07:12:21 -0300 From: JoaoBR <joao@matik.com.br> To: freebsd-ipfw@freebsd.org Cc: Hajimu UMEMOTO <ume@freebsd.org> Subject: Re: kern/93422: Re: ipfw divert rule Message-ID: <200602240712.21502.joao@matik.com.br> In-Reply-To: <ygebqwx856i.wl%ume@mahoroba.org> References: <200602200300.k1K30TZr050863@freefall.freebsd.org> <200602240630.53797.joao@matik.com.br> <ygebqwx856i.wl%ume@mahoroba.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Friday 24 February 2006 06:41, Hajimu UMEMOTO wrote:
>
> joao> ipfw add 1000 divert 8669 dst-ip 0.0.0.0 src-ip 0.0.0.0
>
> joao> work than?
>
> It should work.
>
> joao> How should I rewrite my rules or better regressing to the old "ip f=
rom=20
> any to=20
> joao> any" ?
> It should work as expected, too. =A0You need to pay attention to the use
> of `ip', `ipv4' and `ipv6' with `proto' keyword.
well, then according to the proto-ip-thing this =20
ipfw add deny proto ip dst-ip ${DSTIP} not src-ip ${SRCIP}
should not work correctly but it counts :
=2E. 36 3612 deny ip from any to any dst-ip ... not src-ip ...
so?
Jo=E3o
A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602240712.21502.joao>