ipfw divert with layer2 (if_bridge) packets

Carlos E Gaspar cegaspar at ifi.unicamp.br
Tue May 9 20:45:16 UTC 2006


Hi.

I have the following setup:

FreeBSD abc5.5-PRERELEASE FreeBSD 5.5-PRERELEASE #0: Wed Apr 26 14:58:22 
BRT 2006     root at abc:/usr/src/sys/alpha/compile/ABC alpha

bridge0: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
        ether xx:xx:xx:xx:xx:xx
        priority 32768 hellotime 2 fwddelay 15 maxage 20
        member: de1 flags=3<LEARNING,DISCOVER>
        member: de0 flags=3<LEARNING,DISCOVER>

de1 is my internal interface (local) and de0 the external (internet). 
host1 is on de1. Bridge works fine (if_bridge).

With the following sysctl's:

net.link.bridge.pfil_onlyip: 0
net.link.bridge.pfil_member: 1
net.link.bridge.pfil_bridge: 0
net.link.bridge.ipfw: 0
net.link.ether.ipfw: 1

I'm trying to divert layer2 packets using this ipfw rule, but the 
counters are always 0 0 as seen with 'ipfw show'.

divert 8000 log all from host1 to any layer2 in via de1

What's wrong? It's possible to do that with if_bridge? Do I need FBSD 6.1?
Thanks for advance... sorry about my english

Carlos Gaspar
carlosgaspar at yahoo.com




More information about the freebsd-net mailing list