kern/93422: Re: ipfw divert rule

[JoaoBR]

On Friday 24 February 2006 06:41, Hajimu UMEMOTO wrote:
>
> joao> ipfw add 1000 divert 8669 dst-ip 0.0.0.0 src-ip 0.0.0.0
>
> joao> work than?
>
> It should work.
>
> joao> How should I rewrite my rules or better regressing to the old "ip from 
> any to 
> joao> any" ?

> It should work as expected, too.  You need to pay attention to the use
> of `ip', `ipv4' and `ipv6' with `proto' keyword.


well, then according to the proto-ip-thing  this  

        ipfw add deny proto ip dst-ip ${DSTIP} not src-ip ${SRCIP}

should not work correctly but it counts :

..  36   3612 deny ip from any to any dst-ip ... not src-ip ...

so?


João







A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik  https://datacenter.matik.com.br