Suggestion regarding a new option for IPFW2

Sten Daniel Sørsdal sten.daniel.sorsdal at wan.no
Fri Aug 1 08:48:12 PDT 2003


> 
> I can see value in using a firewall in bridging mode, in which
> case sending ICMP messages might use an alias address not associated
> with any interface -- if there are no IP addrs on the 
> external interface,
> for example.
> 

I dont see how one could divert unreach host messages when unreach 
host drops the message?
It is the error messages generated by IPFW that i am referring to, 
in case that was unclear.

- Sten


More information about the freebsd-ipfw mailing list