From owner-freebsd-net@FreeBSD.ORG  Tue Sep 12 15:04:16 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2034416A415
	for <freebsd-net@freebsd.org>; Tue, 12 Sep 2006 15:04:16 +0000 (UTC)
	(envelope-from jon.otterholm@ide.resurscentrum.se)
Received: from mail1.cil.se (mail1.cil.se [217.197.56.125])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 817BA43D53
	for <freebsd-net@freebsd.org>; Tue, 12 Sep 2006 15:04:14 +0000 (GMT)
	(envelope-from jon.otterholm@ide.resurscentrum.se)
Received: from [192.168.2.10] ([192.168.2.10]) by mail1.cil.se with Microsoft
	SMTPSVC(6.0.3790.0); Tue, 12 Sep 2006 17:04:12 +0200
Message-ID: <4506CC6C.4030308@ide.resurscentrum.se>
Date: Tue, 12 Sep 2006 17:04:12 +0200
From: Jon Otterholm <jon.otterholm@ide.resurscentrum.se>
User-Agent: Thunderbird 1.5 (X11/20060204)
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 12 Sep 2006 15:04:12.0559 (UTC)
	FILETIME=[B4E149F0:01C6D67C]
Subject: Limit arp on bridge
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Sep 2006 15:04:16 -0000

Hello.

I am trying to limit arp-broadcast between member-IF on a bridge 
(if_bridge) with no luck.

I have the following sysctls set:

net.link.bridge.pfil_member: 1
net.link.bridge.pfil_bridge: 1
net.link.bridge.pfil_onlyip: 1

I am using PF for filtering - do I have to use IPFW to limit 
arp-broadcast between memeber-ifs?

/Jon