Michal Malanowicz evild at
Sat Feb 5 17:30:22 PST 2005

>Number:         77156
>Category:       kern
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Feb 06 01:30:20 GMT 2005
Confidential:	no <FreeBSD PRs are public data>
Synopsis:	FreeBSD does not redirect packets on proper interface.
Severity:	[ serious ]
Priority:	[ medium ]
 Originator:	Michal Malanowicz
 Class:		[ sw-bug ]
 Release:	FreeBSD 5.2.1-RELEASE-p13 i386
 System: FreeBSD 5.2.1-RELEASE-p13 FreeBSD 5.2.1-RELEASE-p13 #0: Thu Feb 3 08:57:35 CET 2005 evild at i386
 	<machine, os, target, libraries (multiple lines)>
 	Pentium 700MHz, fxp and xl interfaces.
 	Confider situation like this:
 	ext_net1    ext_net2
 	   |           |
 	 fxp0        fxp1
            \          /
 	gateway configured in ext_net2.
 	ext_net2 and ext_net1 are diffrent IP classes.
 	both ext_net2 and ext_net1 are public internet addresses.
 	I want to run WWW server on both external interfaces.
 	When packet comes from ext_net2 everything works
 	just fine.
 	When packet comes from ext_net1 it uses
 	gateway in ext_net2 to return to sender. This
 	is fine. Packet comes out from fxp1 with fxp0
 	source address.
 	I try to forward packets to ext_net1 gateway, to
 	make them return the same way as they come in
 	using IPFW:
 	ipfw add fwd $ext_net1_gateway ip from $fxp0_ip to any out
 	This is fine.
 	But using IPFILTER or PF to achieve the same
 	functionality is pointless - they not work.
 	No matter how you will try...
 	Those options are set in rc.conf:
 	I tried this on 4.X and on 5.X version.
 	described abowe.
 	Use IPFW instead (but what about loosing a flexible nat?)
 	Oh, and IPFW FWD stops working in FreeBSD 5.3 :( in such case...

More information about the freebsd-bugs mailing list