Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Jun 2003 11:43:30 -0700
From:      "'Luigi Rizzo'" <rizzo@icir.org>
To:        Don Bowman <don@sandvine.com>
Cc:        "'freebsd-net@freebsd.org'" <freebsd-net@freebsd.org>
Subject:   Re: nested ipfw dummynet pipes
Message-ID:  <20030620114330.A98172@xorpc.icir.org>
In-Reply-To: <FE045D4D9F7AED4CBFF1B3B813C8533702741AF6@mail.sandvine.com>; from don@sandvine.com on Fri, Jun 20, 2003 at 02:18:17PM -0400
References:  <FE045D4D9F7AED4CBFF1B3B813C8533702741AF6@mail.sandvine.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 20, 2003 at 02:18:17PM -0400, Don Bowman wrote:
...
> Thanks very much, I will check this. I assume this will be true
> for IPFW2 rather than IPFW.

one_pass actually affect both.
the comment in parentheses refers to "layer 2 firewalling
which is an ipfw2-only fature (bridge firewalling
is also available with ipfw1)

cheers
luigi

> It appears that 1.16.2.23, nov 21 2002, RELENG_4 has this
> from the log:
> "MFC: obey to fw_one_pass in bridge and layer 2 firewalling (the latter
> only affects ipfw2 users).
> Move fw_one_pass from ip_fw[2].c to ip_input.c to avoid depending on
> IPFIREWALL."
> 
> I will try this out.
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030620114330.A98172>