Re: ipfw broken with bridge under 5.x (5.3 and 5.4)

From: Gavin Atkinson <gavin.atkinson_at_ury.york.ac.uk>
Date: Sat, 7 May 2005 13:16:01 +0100 (BST)
On Wed, 4 May 2005, Josef Karthauser wrote:
> On Wed, May 04, 2005 at 06:13:22PM +0100, Gavin Atkinson wrote:
>>
>> I believe I am seeing similar problems to you, though uptime for me is
>> generally measurable in days rather than minutes.  I've found that
>> adding an explicit "allow all from any to any" and then removing it
>> again seems to get it working.  I will test your solution when mine
>> fails again.
>
> It appears that the solution is obtained by adding the rule:
>
>    allow ip from any to any layer2 mac-type arp
>
> to the beginning of the firewall list.  IPFW2 drops non-IP traffic
> whereas IPFW1 passes it though.  This is the reason why my configuration
> stopped working after the upgrade.

Ah-ha!  This also seems to have fixed it for me.  There are a few bits of 
documentation which should probably be updated with this, I'll submit a 
patch in a day or two.

Gavin
Received on Sat May 07 2005 - 10:15:10 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:34 UTC