From owner-freebsd-questions@FreeBSD.ORG Tue Apr 8 01:52:59 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 635F237B401 for ; Tue, 8 Apr 2003 01:52:59 -0700 (PDT) Received: from beachbeest.wizzbit.nl (beachbeest.wizzbit.nl [62.58.54.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2BE7643F75 for ; Tue, 8 Apr 2003 01:52:58 -0700 (PDT) (envelope-from hilmi@wizzbit.nl) Received: from wizzbit.nl (mail.wizzbit.nl [62.58.54.10]) by beachbeest.wizzbit.nl (8.12.6/8.12.6) with SMTP id h388qtXs086577 for ; Tue, 8 Apr 2003 10:52:55 +0200 (CEST) (envelope-from hilmi@wizzbit.nl) Received: from BRUUTBEEST/SpoolDir by wizzbit.nl (Mercury 1.48); 8 Apr 03 10:51:53 +0200 Received: from SpoolDir by BRUUTBEEST (Mercury 1.48); 8 Apr 03 10:51:51 +0200 Received: from wizzbit.nl (62.58.54.254) by wizzbit.nl (Mercury 1.48) with ESMTP; 8 Apr 03 10:51:19 +0200 Message-ID: <3E931A97.90009@wizzbit.nl> Date: Tue, 08 Apr 2003 11:53:11 -0700 From: Hilmi Hilmiev User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.ORG Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: ipfw + bridge + freeBSD 5.0 + droped bdg packets X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Apr 2003 08:52:59 -0000 I want to use it as a bridged firewall using two xl NICs. The kernel is a derivative of GENERIC with options: options IPSEC options IPSEC_ESP options IPSEC_DEBUG options IPFIREWALL options IPDIVERT options IPFIREWALL_FORWARD options IPFIREWALL_VERBOSE options IPFILTER options IPFILTER_LOG options IPFIREWALL_VERBOSE_LIMIT=100 options IPFIREWALL_DEFAULT_TO_ACCEPT options MROUTING options BRIDGE For bridging I use: sysctl net.link.ether.bridge_cfg=xl0,xl1 sysctl net.link.ether.bridge_ipfw=1 sysctl net.link.ether.bridge=1 But when I make "up" the bridge option (sysctl net.link.ether.bridge=1), I get messages: Apr 8 10:47:58 pantser kernel: ether_input: drop bdg packet, bif 0x5 Apr 8 10:48:29 pantser last message repeated 9 times I have searched in google, but I can't find solution in my situation. Have somebody who can help me? What is wrong? Best regards, Hilmi