problems with ipfw2 divert

[Zijian Zhou]

Hi:

I am trying to set up a freebsd machine as a bridge to implement a
sort of firewall at the bridging layer.

I am running:  FreeBSD 4.11-PRERELEASE i386

I have a divert socket bound to the port 8668 for outgoing traffic and
I have another divert socket bound to the port 8669 for incoming
traffic. I am using ipfw2 for diverting traffic.

has anybody experienced this problem; only one side of the traffic
gets diverted and the other side is never touched? if so, has anyone
fixed this problems?

here is my simple ipfw2 rule set:

rp6# ipfw show
00100   8458   2774224 divert 8668 udp from any 68 to any dst-port 67 recv dc0
00101      0         0 divert 8669 udp from any 67 to any dst-port 68 recv dc1
65535 502777 113629564 allow ip from any to any

these are some of my kernel variables for bridging.
rp6# sysctl -a |grep bridg
net.link.ether.bridge_cfg: dc0,dc1
net.link.ether.bridge: 1
net.link.ether.bridge_ipfw: 1
net.link.ether.bridge_ipf: 0
net.link.ether.bridge_ipfw_drop: 0
net.link.ether.bridge_ipfw_collisions: 0


thank you