Date: Tue, 28 Dec 2004 19:39:56 -0500 From: Zijian Zhou <salsayarroz@gmail.com> To: freebsd-questions@freebsd.org Subject: problems with ipfw2 divert Message-ID: <883bd410041228163927bb46c9@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hi: I am trying to set up a freebsd machine as a bridge to implement a sort of firewall at the bridging layer. I am running: FreeBSD 4.11-PRERELEASE i386 I have a divert socket bound to the port 8668 for outgoing traffic and I have another divert socket bound to the port 8669 for incoming traffic. I am using ipfw2 for diverting traffic. has anybody experienced this problem; only one side of the traffic gets diverted and the other side is never touched? if so, has anyone fixed this problems? here is my simple ipfw2 rule set: rp6# ipfw show 00100 8458 2774224 divert 8668 udp from any 68 to any dst-port 67 recv dc0 00101 0 0 divert 8669 udp from any 67 to any dst-port 68 recv dc1 65535 502777 113629564 allow ip from any to any these are some of my kernel variables for bridging. rp6# sysctl -a |grep bridg net.link.ether.bridge_cfg: dc0,dc1 net.link.ether.bridge: 1 net.link.ether.bridge_ipfw: 1 net.link.ether.bridge_ipf: 0 net.link.ether.bridge_ipfw_drop: 0 net.link.ether.bridge_ipfw_collisions: 0 thank you
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?883bd410041228163927bb46c9>