Date: Sat, 17 Apr 2004 08:36:31 -0700 From: bmah@freebsd.org (Bruce A. Mah) To: Julian Elischer <julian@elischer.org> Cc: current@freebsd.org Subject: Re: RFC: ported NetBSD if_bridge Message-ID: <200404171536.i3HFaVpA006386@tomcat.kitchenlab.org> In-Reply-To: <Pine.BSF.4.21.0404170027120.66312-100000@InterJet.elischer.org> References: <Pine.BSF.4.21.0404170027120.66312-100000@InterJet.elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--==_Exmh_-220121241P Content-Type: text/plain; charset=us-ascii If memory serves me right, Julian Elischer wrote: > > 1. ng_bridge(4) doesn't do spanning tree. Neither does bridge(4). > > WHICH spanning tree? Spanning tree is a generic term.. > Are you refering to a particular implimentation of something that uses > spanning tree algorythms? Someone else beat me to this but I was under the impression that if_bridge supported the spanning tree protocol/algorithm used by Ethernet switches. > > 2. A problem that I saw was that ng_bridge(4) didn't interact very well > > with IPFilter...specifically, I recall that IPFilter rules had no effect > > on bridged packets. This was a problem when I was trying to add > > filtered bridging to m0n0wall...the maintainer and I eventually switched > > to using bridge(4)-style bridging after resolving a few other problems. > > There is a ipfw type netgraph module floating around somewhere that you > can link in with ng_bridge to get a much more flexible arangement > should that be needed. Of course it could do with some work.... Thanks. In this case, it wasn't needed. I actually thought about writing an "ng_ipf" node but before I figured out how to do it, I realized the source of the problems we had been having with bridge(4) and came up with a workaround. Cheers, Bruce. --==_Exmh_-220121241P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) Comment: Exmh version 2.5+ 20020506 iD8DBQFAgU7/2MoxcVugUsMRAsWXAJ4p4upvEjSlxUx9UTmnWf2nrMYTGgCgyIVF MoRldVfXTKy+EFr72/d9wvM= =1gHW -----END PGP SIGNATURE----- --==_Exmh_-220121241P--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200404171536.i3HFaVpA006386>