ipfw divert with layer2 (if_bridge) packets
Carlos E Gaspar
cegaspar at ifi.unicamp.br
Tue May 9 20:45:16 UTC 2006
Hi.
I have the following setup:
FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22
BRT 2006 root at abc:/usr/src/sys/alpha/compile/ABC alpha
bridge0: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
ether xx:xx:xx:xx:xx:xx
priority 32768 hellotime 2 fwddelay 15 maxage 20
member: de1 flags=3<LEARNING,DISCOVER>
member: de0 flags=3<LEARNING,DISCOVER>
de1 is my internal interface (local) and de0 the external (internet).
host1 is on de1. Bridge works fine (if_bridge).
With the following sysctl's:
net.link.bridge.pfil_onlyip: 0
net.link.bridge.pfil_member: 1
net.link.bridge.pfil_bridge: 0
net.link.bridge.ipfw: 0
net.link.ether.ipfw: 1
I'm trying to divert layer2 packets using this ipfw rule, but the
counters are always 0 0 as seen with 'ipfw show'.
divert 8000 log all from host1 to any layer2 in via de1
What's wrong? It's possible to do that with if_bridge? Do I need FBSD 6.1?
Thanks for advance... sorry about my english
Carlos Gaspar
carlosgaspar at yahoo.com
More information about the freebsd-net
mailing list