Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Oct 2002 21:25:55 -0700
From:      "Crist J. Clark" <crist.clark@attbi.com>
To:        Andriy Gapon <agapon@excite.com>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: IPFIREWALL_DEFAULT_TO_ACCEPT and bridge
Message-ID:  <20021018042555.GA42581@blossom.cjclark.org>
In-Reply-To: <20021017145455.O1073-100000@edge.foundation.invalid>
References:  <20021017145455.O1073-100000@edge.foundation.invalid>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Thu, Oct 17, 2002 at 03:01:32PM -0400, Andriy Gapon wrote:
> 
> In the situation of host with 3 interfaces and bridging done between two
> of them, when would I need IPFIREWALL_DEFAULT_TO_ACCEPT kernel option ?

Never.

> Is it only if I want filter bridged traffic ?

You don't need it then either/

> Will this option allow all non-ip traffic with IPFW2 or do I need add the
> rule for non-ip traffic before 'deny everything' rule ?

If you are just talking about ARP, it should "just work" without the
option.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20021018042555.GA42581>