evild at evild.eu.org
Sat Feb 5 17:30:22 PST 2005
>Arrival-Date: Sun Feb 06 01:30:20 GMT 2005
Confidential: no <FreeBSD PRs are public data>
Synopsis: FreeBSD does not redirect packets on proper interface.
Severity: [ serious ]
Priority: [ medium ]
Originator: Michal Malanowicz
Class: [ sw-bug ]
Release: FreeBSD 5.2.1-RELEASE-p13 i386
System: FreeBSD farel.evild.eu.org 5.2.1-RELEASE-p13 FreeBSD 5.2.1-RELEASE-p13 #0: Thu Feb 3 08:57:35 CET 2005 evild at blue.evild.eu.org:/usr/src/sys/i386/compile/BLUE i386
<machine, os, target, libraries (multiple lines)>
Pentium 700MHz, fxp and xl interfaces.
Confider situation like this:
gateway configured in ext_net2.
ext_net2 and ext_net1 are diffrent IP classes.
both ext_net2 and ext_net1 are public internet addresses.
I want to run WWW server on both external interfaces.
When packet comes from ext_net2 everything works
When packet comes from ext_net1 it uses
gateway in ext_net2 to return to sender. This
is fine. Packet comes out from fxp1 with fxp0
I try to forward packets to ext_net1 gateway, to
make them return the same way as they come in
ipfw add fwd $ext_net1_gateway ip from $fxp0_ip to any out
This is fine.
But using IPFILTER or PF to achieve the same
functionality is pointless - they not work.
No matter how you will try...
Those options are set in rc.conf:
I tried this on 4.X and on 5.X version.
Use IPFW instead (but what about loosing a flexible nat?)
Oh, and IPFW FWD stops working in FreeBSD 5.3 :( in such case...
More information about the freebsd-bugs