What's the "bridged" option in ipfw's man page ?

[Christian Hiris]

On Monday 24 May 2004 13:04, Supote Leelasupphakorn wrote:
> Hi... lists,
>
>   I've read the "ipfw" man page and in the "RULE OPTION"
> There is "bridged" option there. I'm currently set the
> bridge-base firewall so my question is what's the bridged
> packets and how much I take advantage from this option ?
>
> TIA,
> pjn

The rule option "bridged" is used as an alias for "layer2" by the ipfw 
command. 

Some interesting points written in "PACKET FLOW" in man ipfw and "BUGS" in man 
bridge.

Examples how the layer2 rule option could be used (I have not tested them, you 
can find some more on google):

 ${fwcmd} add pass layer2 mac-type arp 	// allow arp
 ${fwcmd} add skipto 20000 layer2	// goto rules for bridged packets

 ${fwcmd} add [...]			// rules for non-bridged packets
 ${fwcmd} add deny all from any to any	// end of rules for non-bridged packets

 ${fwcmd} add 20000 [...]		// rules for bridged packets 


regards
ch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: signature
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20040524/6665d2d3/attachment.bin