FreeBSD 5.3 routing IPFW FWD'd packets?

John Hay jhay at icomtek.csir.co.za
Wed Dec 1 07:17:30 PST 2004


> >>
> >>>>Packets sent to the directly reachable net 192.168.254/8 (rule 64000)
> >>>>seem to work.  Is it possible that packets are somehow being routed
> >>>>after being FWD'd by IPFW?
> >>>>       
> >>>>
> >Just apply the patch in kern/71910 and you should be happy again. It works
> >for me and a few others.
> >
> > 
> >
> Thanks.  But, if that is a problem then why is this code in ip_fastfwd.c 
> not also a problem?
> Shouldn't this get the same change as kern/71910?
> 
> #ifdef IPFIREWALL_FORWARD
>                if (fwd_tag) {
>                        if (!in_localip(ip->ip_src) && 
> !in_localaddr(ip->ip_dst))
>                                dest.s_addr = ((struct sockaddr_in 
> *)(fwd_tag+1))->sin_addr.s_addr;
>                        m_tag_delete(m, fwd_tag);
>                }
> #endif /* IPFIREWALL_FORWARD */

It looks like it. It is probably not part of the patch because the
original person did not use (and me neither) fast forwarding.

John
-- 
John Hay -- John.Hay at icomtek.csir.co.za / jhay at FreeBSD.org


More information about the freebsd-ipfw mailing list