simple mac address filter

Robert Klein RoKlein at roklein.de
Wed Sep 8 10:40:24 PDT 2004


On Dienstag, 7. September 2004 23:46, Skip Ford wrote:
> Robert Klein wrote:
> > umm... if I think this should not work.. except you have
> > options         IPFIREWALL_DEFAULT_TO_ACCEPT
> > in your kernel config file.  Could you please check and tell
> > us?
>
> No, it denies but I have other layer 3 rules that allow it. 
> It didn't occur to me the OP was trying to hit both layers
> with a single rule.

:)  It wouldn't have occurred to me either if I hadn't made the 
same mistake myself... :P

Robert


More information about the freebsd-ipfw mailing list