From owner-freebsd-net  Wed May 29  8:40:55 2002
Delivered-To: freebsd-net@freebsd.org
Received: from stl-smtpout-01.boeing.com (stl-smtpout-01.boeing.com [12.13.247.21])
	by hub.freebsd.org (Postfix) with ESMTP id C87D237B404
	for <freebsd-net@freeBSD.ORG>; Wed, 29 May 2002 08:40:49 -0700 (PDT)
Received: from stl-av-02.boeing.com ([192.76.190.7])
	by stl-smtpout-01.boeing.com (8.9.2/8.8.5-M2) with ESMTP id KAA08465
	for <freebsd-net@freeBSD.ORG>; Wed, 29 May 2002 10:36:09 -0500 (CDT)
Received: from blv-hub-01.boeing.com (localhost [127.0.0.1])
	by stl-av-02.boeing.com (8.9.3/8.9.2/MBS-AV-01) with ESMTP id KAA24368
	for <freebsd-net@freeBSD.ORG>; Wed, 29 May 2002 10:40:48 -0500 (CDT)
Received: from xch-nwbh-02.nw.nos.boeing.com (xch-nwbh-02.nw.nos.boeing.com [192.54.12.28])
	by blv-hub-01.boeing.com (8.11.3/8.11.3/MBS-LDAP-01) with ESMTP id g4TFekH11001
	for <freebsd-net@freeBSD.ORG>; Wed, 29 May 2002 08:40:46 -0700 (PDT)
Received: by xch-nwbh-02.nw.nos.boeing.com with Internet Mail Service (5.5.2650.21)
	id <L498W9TQ>; Wed, 29 May 2002 08:40:46 -0700
Message-ID: <F10E013C394AD411A2F10008C75DF4823D4387@xch-knt-01.nw.nos.boeing.com>
From: "Albuquerque, Marcelo M" <marcelo.m.albuquerque@boeing.com>
To: "'freebsd-net@freeBSD.ORG'" <freebsd-net@freeBSD.ORG>
Subject: Does "xmit" work with ipfw dummynet?
Date: Wed, 29 May 2002 08:40:36 -0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

dummynet is not behaving as expected, and I'm wondering whether the command
is compatible with bridging mode (freebsd 4.5):
sysctl -w net.link.ether.bridge=1

Here is the setup:

                 ___________________
                |                   |
192.168.1.1 --- |FreeBSD 4.5 Bridge | --- 192.168.1.2
                |___________________|
                          |
                          |
                     192.168.1.3


This works:
ipfw add 100 deny ip from any to any in recv fxp0

This doesn't:
ipfw add 100 deny ip from any to any out xmit fxp1

What I really want, but fear is not supported, is:
ipfw add 100 deny ip from any to any out recv fxp0 xmit fxp1

That is, I want to block traffic coming in from fxp0 and going out
fxp1, in bridged mode.

Anyone know if this is possible?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message