Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 15 May 2004 22:27:32 +0900
From:      Rob <stopspam@users.sourceforge.net>
To:        freebsd-questions@freebsd.org
Subject:   ipfw2: "mac any any" blocks ipfw rule
Message-ID:  <40A61AC4.1040708@users.sourceforge.net>

next in thread | raw e-mail | index | archive | help

Hi,


I use FreeBSD 4.9-Stable, with IPFW2 compiled in.

I have an ipfw rule as follows:

   ipfw allow udp from 11.22.33.44 to any in via rl0

which works fine for my purpose (I faked the IP address for this email).

Next I needed to add MAC-checking on this rule, so to begin with
I tried to add a dummy mac-check (allow all mac addresses in & out):

   ipfw allow udp from 11.22.33.44 to any in via rl0 mac any any


But this will block, whatever was allowed by the previous version of
this rule. How is that possible?

In this mailinglist I also found a note on:

   sysctl net.link.ether.ipfw=1

which I did, to no avail.

Any ideas, or is MAC-checking broken with ipfw2?

Thanks,
Rob.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?40A61AC4.1040708>