From owner-freebsd-ipfw@FreeBSD.ORG Fri Aug 24 12:13:58 2007 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 69F0F16A417 for ; Fri, 24 Aug 2007 12:13:58 +0000 (UTC) (envelope-from yamamoto436@oki.com) Received: from gwf1.oki.co.jp (gwf1.oki.co.jp [202.226.91.186]) by mx1.freebsd.org (Postfix) with ESMTP id 34DDE13C491 for ; Fri, 24 Aug 2007 12:13:58 +0000 (UTC) (envelope-from yamamoto436@oki.com) Received: by gwf1.oki.co.jp (Postfix, from userid 0) id 9F410CF996; Fri, 24 Aug 2007 20:53:07 +0900 (JST) Received: from s24c22.dm1.oii.oki.co.jp [172.26.76.72] by gwf1.oki.co.jp with ESMTP id WAA28972; Fri, 24 Aug 2007 20:53:07 +0900 Received: from aoi.bmc.oki.co.jp (localhost.localdomain [127.0.0.1]) by iscan1.intra.oki.co.jp (8.9.3/8.9.3) with SMTP id UAA24627 for ; Fri, 24 Aug 2007 20:53:02 +0900 Received: (qmail 30505 invoked from network); 24 Aug 2007 20:53:01 +0900 Received: from tulip.bmc.oki.co.jp (172.19.236.119) by aoi.bmc.oki.co.jp with SMTP; 24 Aug 2007 20:53:00 +0900 Received: from localhost (tulip.bmc.oki.co.jp [172.19.236.119]) by tulip.bmc.oki.co.jp (8.14.1/8.13.6) with ESMTP id l7OBqwfD062528 for ; Fri, 24 Aug 2007 20:52:58 +0900 (JST) (envelope-from yamamoto436@oki.com) Date: Fri, 24 Aug 2007 20:52:58 +0900 (JST) Message-Id: <20070824.205258.48475190.yamamoto436@oki.com> To: freebsd-ipfw@freebsd.org From: Hideki Yamamoto In-Reply-To: <200708231442.l7NEgJ1g092861@freefall.freebsd.org> References: <200708231442.l7NEgJ1g092861@freefall.freebsd.org> X-Mailer: Mew version 4.2 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: ng_ipfw + ng_bridge X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Aug 2007 12:13:58 -0000 Hi, I am installing FreeBSD boxes to bridge two IPv6 networks over IPv4 udp tunnel. This network requires packet filtering on bridge node. I have installed netgraph to bridge networks, but have not yet installed packet filtering on it. Ordinary ipfw command cannot filter packet on netgraph. I have found the ng_ipfw that seems to be able to control packet filter onto netgraph nodes, but I do not understand what to do. Does anyone knows any information about it? Thanks in advance. Regards, Hideki Yamamoto. ----------------------------------------------------------------- Hideki YAMAMOTO (Dr.) | Broadband Media Solutions Department-1 | E-mail: yamamoto436@oki.com Broadband Media Company | Tel: +81-48-420-7012 Oki Electric Industry Co., Ltd. | FAX: +81-48-420-7016