Date: Mon, 7 Dec 2009 22:45:43 +0300 From: Lytochkin Boris <lytboris@gmail.com> To: Max Laier <max@love2party.net> Cc: Luigi Rizzo <luigi@freebsd.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org, Julian Elischer <julian@elischer.org>, sem@freebsd.org, =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org> Subject: Re: svn commit: r200183 - head/sbin/ipfw Message-ID: <933fa9790912071145k4d97c177qc6f963ba0ffbb13@mail.gmail.com> In-Reply-To: <200912072029.05907.max@love2party.net> References: <200912061804.nB6I4R38027652@svn.freebsd.org> <4B1D437F.4050601@elischer.org> <4B1D4723.5090908@elischer.org> <200912072029.05907.max@love2party.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi! On Mon, Dec 7, 2009 at 10:29 PM, Max Laier <max@love2party.net> wrote: [cut] > I just tested an install of r197983 (9.0-CURRENT) that I had on a test-bo= x and > route-to works as it is supposed to - AFAICT. =A0FWIW, pf sets sin_len fo= r every > use. > > Might be a problem/mis-understanding in the OPs configuration that is the > issue here? > > I'll follow up to the thread on -net@ is a second. I posted my pf config in original message to -net@: =3D=3D=3D=3D=3D scrub in all fragment reassemble pass in all flags S/SA keep state pass out quick route-to (em0 10.60.128.254) inet from 10.60.128.0/24 to any flags S/SA keep state =3D=3D=3D=3D=3D Pretty simple. Even when forward is disabled packets that are matched by route-to rule are forwarded to default gateway instead of specified in route-to. And I checked rtalloc_ign_fib() arguments when using pf - seems that pf does not use this function to lookup route-to route. +sem@ --=20 Regards, Boris Lytochkin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?933fa9790912071145k4d97c177qc6f963ba0ffbb13>