ipfw with nat - allowing by MAC address

Julian Elischer julian at elischer.org
Mon Apr 23 23:01:07 UTC 2007


Patrick Tracanelli wrote:
>> the trick is to remmeber that "check-state" just re-runs the rule that
>> had the orginal keep-state, and that that rule can be almost anything, 
>> including
>> a skipto.
> 
> What if it is a FWD?

true too..
though fwd will do nothing in Layer2

use skipto  to simulate what you want to do.





More information about the freebsd-ipfw mailing list