Re: ipfw amd bridge

[Julian Elischer <julian_(_at_)_elischer_(_dot_)_org>]

Olivier Nicole wrote:
> Hi,
>
> I remember reqading in the past (4.x) that on a machine with bridged
> interfaces, only layer 2 rules of ipfw would apply.

not quite.
there are rules that do not work when called from a layer two
point. e.g. divert does not work, nor does 'fwd' (without patches).
Rules not specifically labeled "layer2" will still process packets,
but rules labeled "not layer2" will not do so. (as expected).

note if_bridge and bridge are different and may have
behavioral differences in this regard.



> Is this still the case with 6.4, 7.1?
>
> best regards,
>
> Olivier
> _______________________________________________
> freebsd-ipfw_(_at_)_freebsd_(_dot_)_org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe_(_at_)_freebsd_(_dot_)_org"

_______________________________________________
freebsd-ipfw_(_at_)_freebsd_(_dot_)_org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe_(_at_)_freebsd_(_dot_)_org"