Date: Sat, 14 Mar 2009 23:35:24 -0700 From: Julian Elischer <julian@elischer.org> To: Olivier Nicole <on@cs.ait.ac.th> Cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw amd bridge Message-ID: <49BCA1AC.7080905@elischer.org> In-Reply-To: <200903150605.n2F653Uw021328@banyan.cs.ait.ac.th> References: <200903150605.n2F653Uw021328@banyan.cs.ait.ac.th>
next in thread | previous in thread | raw e-mail | index | archive | help
Olivier Nicole wrote: > Hi, > > I remember reqading in the past (4.x) that on a machine with bridged > interfaces, only layer 2 rules of ipfw would apply. not quite. there are rules that do not work when called from a layer two point. e.g. divert does not work, nor does 'fwd' (without patches). Rules not specifically labeled "layer2" will still process packets, but rules labeled "not layer2" will not do so. (as expected). note if_bridge and bridge are different and may have behavioral differences in this regard. > > Is this still the case with 6.4, 7.1? > > best regards, > > Olivier > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?49BCA1AC.7080905>