misc/116238: natd/ipfw not maintaining interface of udp packets (maybe tcp too?)

Andrey V. Elsukov bu7cher at yandex.ru
Mon Sep 10 21:43:13 PDT 2007


Joe wrote:
>  Funny that you mention the 'divert rules'.  I have firewall rules t=
>  hat have been in use since about 4.2 and worked fine when I upgraded my old=
>   4.2 box up to 5.x and 6.x and all the way up to 6.2 p6.  I have a new box =
>  that I installed fresh with 6.2 p7 and the old dhcpd binary that was built =
>  prior to this, works fine with my firewall rules.  The new dhcpd binary bui=
>  lt with 6.2 p7 which uses the same config as the old one and is the same ve=
>  rsion ( binaries differ though ) gets a packet in on INT_IFACE and then the=
>   reply gets broadcast out EXT_IFACE.  I am using the divert rule on the EXT=
>  _IFACE ONLY! =20

I think this problem is not related with ipfw nor with natd.
First of inspect your configs once again.
Second, check build configuration for your dhcpd.
Is it the same?

-- 
WBR, Andrey V. Elsukov


More information about the freebsd-bugs mailing list