From owner-freebsd-hackers  Wed Jan 29 16:28:27 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id QAA02705
          for hackers-outgoing; Wed, 29 Jan 1997 16:28:27 -0800 (PST)
Received: from whistle.com (s205m131.whistle.com [207.76.205.131])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id QAA02697
          for <hackers@freebsd.org>; Wed, 29 Jan 1997 16:28:24 -0800 (PST)
Received: (from smap@localhost) by whistle.com (8.7.5/8.6.12) id QAA20289; Wed, 29 Jan 1997 16:27:45 -0800 (PST)
Received: from bubba.whistle.com(207.76.205.7) by whistle.com via smap (V1.3)
	id sma020287; Wed Jan 29 16:27:22 1997
Received: (from archie@localhost) by bubba.whistle.com (8.7.5/8.6.12) id QAA25259; Wed, 29 Jan 1997 16:27:21 -0800 (PST)
From: Archie Cobbs <archie@whistle.com>
Message-Id: <199701300027.QAA25259@bubba.whistle.com>
Subject: Re: ipdivert & masqd
In-Reply-To: <199701300011.AAA15020@awfulhak.demon.co.uk> from Brian Somers at "Jan 30, 97 00:11:56 am"
To: brian@awfulhak.demon.co.uk (Brian Somers)
Date: Wed, 29 Jan 1997 16:27:21 -0800 (PST)
Cc: archie@whistle.com, terry@lambert.org, ari.suutari@ps.carel.fi,
        hackers@freebsd.org, cmott@srv.net
X-Mailer: ELM [version 2.4ME+ PL25 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


> I've essentially got the following:
> 
>     ----------------                   ----------------------
>     |   10.0.10.2   |------------------|   10.0.10.1        |
>     ----------------                   |                    |
>                                        |   10.0.1.254 (ed0) |
>                                        ----------------------
>                                                |
>                                                |
>     -----------------                          |
>     |   10.0.1.1    |---------------------------
>     -----------------
> 
> with a mask of ffffff00 everywhere and the machine in the middle using
> the following:
> 
>     ipfw add 100 divert 6668 all from any to any via ed0

A-HAH! :-)

Could you try the following patch?

Thanks,
-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com

Index: ip_input.c
===================================================================
RCS file: /cvs/freebsd/src/sys/netinet/ip_input.c,v
retrieving revision 1.50.2.1
diff -c -r1.50.2.1 ip_input.c
*** 1.50.2.1	1996/11/11 23:40:45
--- ip_input.c	1997/01/30 00:26:55
***************
*** 431,436 ****
--- 431,438 ----
  	return;
  
  ours:
+ 	ip_divert_ignore = 0;	/* This packet is being consumed locally,
+ 				   so we can turn off loop avoidance. */
  
  	/*
  	 * If offset or IP_MF are set, must reassemble.