ipfw2: "mac any any" blocks ipfw rule

Rob stopspam at users.sourceforge.net
Sat May 15 06:27:35 PDT 2004


Hi,


I use FreeBSD 4.9-Stable, with IPFW2 compiled in.

I have an ipfw rule as follows:

   ipfw allow udp from 11.22.33.44 to any in via rl0

which works fine for my purpose (I faked the IP address for this email).

Next I needed to add MAC-checking on this rule, so to begin with
I tried to add a dummy mac-check (allow all mac addresses in & out):

   ipfw allow udp from 11.22.33.44 to any in via rl0 mac any any


But this will block, whatever was allowed by the previous version of
this rule. How is that possible?

In this mailinglist I also found a note on:

   sysctl net.link.ether.ipfw=1

which I did, to no avail.

Any ideas, or is MAC-checking broken with ipfw2?

Thanks,
Rob.




More information about the freebsd-questions mailing list