From owner-freebsd-ipfw@FreeBSD.ORG Tue Feb 28 17:40:13 2012 Return-Path: Delivered-To: freebsd-ipfw@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F05771065672 for ; Tue, 28 Feb 2012 17:40:13 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id DFD518FC0C for ; Tue, 28 Feb 2012 17:40:13 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q1SHeD7J034762 for ; Tue, 28 Feb 2012 17:40:13 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q1SHeDxt034761; Tue, 28 Feb 2012 17:40:13 GMT (envelope-from gnats) Date: Tue, 28 Feb 2012 17:40:13 GMT Message-Id: <201202281740.q1SHeDxt034761@freefall.freebsd.org> To: freebsd-ipfw@FreeBSD.org From: Eugene Grosbein Cc: Subject: Re: kern/129036: [ipfw] 'ipfw fwd' does not change outgoing interface name X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Eugene Grosbein List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Feb 2012 17:40:14 -0000 The following reply was made to PR kern/129036; it has been noted by GNATS. From: Eugene Grosbein To: Sergey Matveychuk Cc: bug-followup@freebsd.org Subject: Re: kern/129036: [ipfw] 'ipfw fwd' does not change outgoing interface name Date: Wed, 29 Feb 2012 00:38:10 +0700 27.02.2012 20:11, Sergey Matveychuk пишет: > Can't reproduce on both 9.0 and 8.3. Could you test on them please? I've just testet 8.3-PRERELEASE and problem is still here. In my current setup, the router based on 8.3-PRE has 3 interfaces: - vr0 is LAN - ng0 is primary uplink (default route points to ng0) - vr1 is secondary uplink. The very first lines of ipfw ruleset are: ipfw add 10 fwd G.G.G.G ip from any to 1.1.1.1 in recv vr0 ipfw add 15 allow ip from any to 1.1.1.1 in ipfw add 20 count ip from any to 1.1.1.1 out xmit ng0 Here G.G.G.G is gateway address of secondary uplink, so route to G.G.G.G points to vr1. And I run "ping -c1 1.1.1.1" from LAN while running "tcpdump -np vr1 host 1.1.1.1". tcpdump shows me that rule 10 works and ICMP packet goes out via vr1. But the packes still matchs rule 20 - that's the problem. Eugene Grosbein