FreeBSD 5.3 routing IPFW FWD'd packets?

James R. Van Artsalen james at jrv.org
Wed Dec 1 06:35:07 PST 2004


John Hay wrote:

>On Tue, Nov 30, 2004 at 08:57:59PM +0100, Max Laier wrote:
>  
>
>>On Tuesday 30 November 2004 19:41, James R. Van Artsalen wrote:
>>    
>>
>>>>Packets sent to the directly reachable net 192.168.254/8 (rule 64000)
>>>>seem to work.  Is it possible that packets are somehow being routed
>>>>after being FWD'd by IPFW?
>>>>        
>>>>
>Just apply the patch in kern/71910 and you should be happy again. It works
>for me and a few others.
>
>  
>
Thanks.  But, if that is a problem then why is this code in ip_fastfwd.c 
not also a problem?
Shouldn't this get the same change as kern/71910?

#ifdef IPFIREWALL_FORWARD
                if (fwd_tag) {
                        if (!in_localip(ip->ip_src) && 
!in_localaddr(ip->ip_dst))
                                dest.s_addr = ((struct sockaddr_in 
*)(fwd_tag+1))->sin_addr.s_addr;
                        m_tag_delete(m, fwd_tag);
                }
#endif /* IPFIREWALL_FORWARD */



More information about the freebsd-ipfw mailing list