Another bug in IPFW@ ...?
Oliver Fromme
olli at lurza.secnetix.de
Wed Aug 3 08:25:18 GMT 2005
Sten Daniel Sørsdal <lists at wm-access.no> wrote:
> Oliver Fromme wrote:
> > However, the problem is that the second option is being
> > ignored, and I would like to know why, and how to work-
> > around the bug.
>
> Would this work?:
>
> # ipfw add pass ip from me to $N out xmit xl0
No. It wouldn't check the (non-existing) incoming interface.
The "from me" pattern does not check any interfaces. It only
checks that the source IP in the packet is one of the locally
configured IP addresses.
Best regards
Oliver
--
Oliver Fromme, secnetix GmbH & Co KG, Marktplatz 29, 85567 Grafing
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.
"Python tricks" is a tough one, cuz the language is so clean. E.g.,
C makes an art of confusing pointers with arrays and strings, which
leads to lotsa neat pointer tricks; APL mistakes everything for an
array, leading to neat one-liners; and Perl confuses everything
period, making each line a joyous adventure <wink>.
-- Tim Peters
More information about the freebsd-ipfw
mailing list