Hi, I don't know if this is normal behaviour: fbsd# arp -a fbsd (192.168.1.1) at 00:14:85:22:8f:62 on sk0 permanent [ethernet] enterprise (192.168.1.2) at 00:0d:88:6e:6d:b4 on sk0 [ethernet] fbsd# kldload ipfw.ko fbsd# kldload dummynet.ko fbsd# sysctl -n net.link.ether.ipfw=1 0 -> 1 fbsd# ipfw add 100 permit ip from any to any 00100 allow ip from any to any fbsd# ping 192.168.1.2 PING 192.168.1.2 (192.168.1.2): 56 data bytes 64 bytes from 192.168.1.2: icmp_seq=0 ttl=64 time=0.362 ms 64 bytes from 192.168.1.2: icmp_seq=1 ttl=64 time=0.260 ms ^C --- 192.168.1.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.260/0.311/0.362/0.051 ms fbsd# ipfw delete 100 fbsd# ipfw add 100 permit ip from any to any MAC any any 00100 allow ip from any to any MAC any any fbsd# ping 192.168.1.2 PING 192.168.1.2 (192.168.1.2): 56 data bytes ping: sendto: Permission denied ping: sendto: Permission denied ^C --- 192.168.1.2 ping statistics --- 2 packets transmitted, 0 packets received, 100% packet loss So my question is: if I select dst and src MAC to any shouldn't ipfw let me pass? I've got same result when I've tried ipfw add 100 permit MAC 00:0d:88:6e:6d:b4 any ipfw add 100 permit MAC any 00:14:85:22:8f:62 fbsd# uname -a FreeBSD fbsd 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Sat May 6 19:29:12 CEST 2006 GENERIC config. sk0 is NIC on both machines. Regards, gg.Received on Fri May 12 2006 - 17:51:49 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:55 UTC