[Bug 256828] ipfw fwd stopped working after upgrade from 12.2 to 13.0

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 256828] ipfw fwd stopped working after upgrade from 12.2 to 13.0"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 25 Jun 2021 12:27:36 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256828

--- Comment #1 from Mike <woody@woody.ru> ---
First box is 12.2

root@freebsd:~ # uname -a
FreeBSD freebsd 12.2-RELEASE-p7 FreeBSD 12.2-RELEASE-p7 GENERIC  amd64

root@freebsd:~ # ipfw show
01000 164 13146 fwd 146.185.211.254 ip4 from 146.185.210.33 to any out
65534 682 61472 allow ip from any to any
65535   0     0 deny ip from any to any

root@freebsd:~ # ifconfig
vtnet0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
       
options=6c07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        ether fa:16:3e:6b:d5:ee
        inet 89.208.84.44 netmask 0xfffffc00 broadcast 89.208.87.255
        inet6 fe80::f816:3eff:fe6b:d5ee%vtnet0 prefixlen 64 scopeid 0x1
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
vtnet1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
       
options=6c07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        ether fa:16:3e:80:95:dc
        inet 146.185.210.33 netmask 0xfffffc00 broadcast 146.185.211.255
        inet6 fe80::f816:3eff:fe80:95dc%vtnet1 prefixlen 64 scopeid 0x2
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
        inet 127.0.0.1 netmask 0xff000000
        groups: lo
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

root@freebsd:~ # netstat -4rn
Routing tables

Internet:
Destination        Gateway            Flags     Netif Expire
default            89.208.87.254      UGS      vtnet0
89.208.84.0/22     link#1             U        vtnet0
89.208.84.44       link#1             UHS         lo0
127.0.0.1          link#3             UH          lo0
146.185.208.0/22   link#2             U        vtnet1
146.185.210.33     link#2             UHS         lo0


Ping from outside to second IP works as expected with ipfw fwd rule. 

woody@unknown ~ % ping 146.185.210.33
PING 146.185.210.33 (146.185.210.33): 56 data bytes
64 bytes from 146.185.210.33: icmp_seq=0 ttl=51 time=28.814 ms
64 bytes from 146.185.210.33: icmp_seq=1 ttl=51 time=33.822 ms
64 bytes from 146.185.210.33: icmp_seq=2 ttl=51 time=38.074 ms
64 bytes from 146.185.210.33: icmp_seq=3 ttl=51 time=42.863 ms
64 bytes from 146.185.210.33: icmp_seq=4 ttl=51 time=38.847 ms

-- 
You are receiving this mail because:
You are the assignee for the bug.