Date: Tue, 09 May 2006 17:45:02 -0300 From: Carlos E Gaspar <cegaspar@ifi.unicamp.br> To: freebsd-net@freebsd.org Subject: ipfw divert with layer2 (if_bridge) packets Message-ID: <4460FF4E.10305@ifi.unicamp.br>
next in thread | raw e-mail | index | archive | help
Hi. I have the following setup: FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22 BRT 2006 root@abc:/usr/src/sys/alpha/compile/ABC alpha bridge0: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 ether xx:xx:xx:xx:xx:xx priority 32768 hellotime 2 fwddelay 15 maxage 20 member: de1 flags=3<LEARNING,DISCOVER> member: de0 flags=3<LEARNING,DISCOVER> de1 is my internal interface (local) and de0 the external (internet). host1 is on de1. Bridge works fine (if_bridge). With the following sysctl's: net.link.bridge.pfil_onlyip: 0 net.link.bridge.pfil_member: 1 net.link.bridge.pfil_bridge: 0 net.link.bridge.ipfw: 0 net.link.ether.ipfw: 1 I'm trying to divert layer2 packets using this ipfw rule, but the counters are always 0 0 as seen with 'ipfw show'. divert 8000 log all from host1 to any layer2 in via de1 What's wrong? It's possible to do that with if_bridge? Do I need FBSD 6.1? Thanks for advance... sorry about my english Carlos Gaspar carlosgaspar@yahoo.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4460FF4E.10305>