Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Feb 2006 06:30:53 -0300
From:      JoaoBR <joao@matik.com.br>
To:        Hajimu UMEMOTO <ume@freebsd.org>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: kern/93422: Re: ipfw divert rule
Message-ID:  <200602240630.53797.joao@matik.com.br>
In-Reply-To: <ygelkw58dl9.wl%ume@mahoroba.org>
References:  <200602200300.k1K30TZr050863@freefall.freebsd.org> <200602201721.50781.joao@matik.com.br> <ygelkw58dl9.wl%ume@mahoroba.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 21 February 2006 02:50, Hajimu UMEMOTO wrote:

> joao> same reason why "... pipe proto ip in|out" does not pipe any more,
> right?
>
> Yes.
>

in addition to our "proto" talk. omitting "proto" in the rule the rule as in

ipfw add deny dst-ip ${IP} recv ${NIC}

works, but this

ipfw add deny proto ip dst-ip ${IP} recv ${NIC}

does not

so would something as

ipfw add 1000 divert 8669 dst-ip 0.0.0.0 src-ip 0.0.0.0

work than?=20

How should I rewrite my rules or better regressing to the old "ip from any =
to=20
any" ?

thank's
Jo=E3o







A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik  https://datacenter.matik.com.br



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602240630.53797.joao>