Fwd: carp + ipfw problem

rihad rihad at mail.ru
Tue Nov 8 08:31:12 PST 2005


> Hello all,
> 
> I'm trying to configure a firewall with carp + ipfw, but I encountered the
> strange problem.
> 
> Packets are bypassing carp interface, instead ipfw log shows packet flow
> to/from physical interface, e.g.:
> 

http://www.countersiege.com/doc/pfsync-carp/

"it is important to keep in mind that from pf's perspective, all traffic 
comes from the physical interface, even if it is routed through the carp 
address. However, the address is of course associated with the carp 
interface."


More information about the freebsd-stable mailing list