What's the "bridged" option in ipfw's man page ?

Christian Hiris 4711 at chello.at
Mon May 24 13:59:21 PDT 2004

On Monday 24 May 2004 13:04, Supote Leelasupphakorn wrote:
> Hi... lists,
>   I've read the "ipfw" man page and in the "RULE OPTION"
> There is "bridged" option there. I'm currently set the
> bridge-base firewall so my question is what's the bridged
> packets and how much I take advantage from this option ?
> TIA,
> pjn

The rule option "bridged" is used as an alias for "layer2" by the ipfw 

Some interesting points written in "PACKET FLOW" in man ipfw and "BUGS" in man 

Examples how the layer2 rule option could be used (I have not tested them, you 
can find some more on google):

 ${fwcmd} add pass layer2 mac-type arp 	// allow arp
 ${fwcmd} add skipto 20000 layer2	// goto rules for bridged packets

 ${fwcmd} add [...]			// rules for non-bridged packets
 ${fwcmd} add deny all from any to any	// end of rules for non-bridged packets

 ${fwcmd} add 20000 [...]		// rules for bridged packets 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: signature
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20040524/6665d2d3/attachment.bin

More information about the freebsd-ipfw mailing list