ipfw2: "mac any any" blocks ipfw rule
    Rob 
    stopspam at users.sourceforge.net
       
    Sat May 15 06:27:35 PDT 2004
    
    
  
Hi,
I use FreeBSD 4.9-Stable, with IPFW2 compiled in.
I have an ipfw rule as follows:
   ipfw allow udp from 11.22.33.44 to any in via rl0
which works fine for my purpose (I faked the IP address for this email).
Next I needed to add MAC-checking on this rule, so to begin with
I tried to add a dummy mac-check (allow all mac addresses in & out):
   ipfw allow udp from 11.22.33.44 to any in via rl0 mac any any
But this will block, whatever was allowed by the previous version of
this rule. How is that possible?
In this mailinglist I also found a note on:
   sysctl net.link.ether.ipfw=1
which I did, to no avail.
Any ideas, or is MAC-checking broken with ipfw2?
Thanks,
Rob.
    
    
More information about the freebsd-questions
mailing list