Dear Jim Sorry , maybe my poor english.
My freebsd box have 4 interfaces , 2ix and 2igb . I connect ssh via igb0. What I am facing is , I have re-compiled kernel to have netmap.ko , a router box (just static routes ) with ix0 and ix1. I compile the kipfw and run “ ./kipfw netmap:ix0 netmap:ix1 “ , all connection with ix0 and ix1 will getting blocked , my ipfw rules is only one line “ add 65534 pass ip from any to any” . My question is , do netmap with ipfw could be used for a production filtering box ? I google around and see someone was working but I could not get full documents for installation or testing. Thanks for advise. Archy Cho > Jim Thompson <j...@netgate.com> 於 2015年10月10日 上午1:14 寫道： > > >> On Oct 9, 2015, at 7:14 AM, Archy Cho <archy...@gmail.com> wrote: >> >> I think I must misunderstand something , could anyone send me advise? >> Or any documents could help to build a NETMAP IPFW firewall box ? > > See the last several paragraphs of: > > https://github.com/luigirizzo/netmap-ipfw/blob/next/README > > Note that the "telnet localhost 5566" traffic generator hack mentioned in the > README doesn't work without a recompile, but you won't need it for running > real traffic. > > Jim > _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
