PF: divert-to with bridge

Hi, I'm experiencing similar issue than https://marc.info/?l=openbsd-misc&m=136934201423696&w=2 with -current on an i386 APU2. The problem is the divert-to rule is not working on interfaces that are part of a bridge(4). Is it a know issue? Thank you, Best -- Olivier Cherrier Phone: +3

Re: divert-to with bridge

On Mon, 27 May 2013 15:54:23 +0200 David Coppa wrote: > > Sure, but this is misc@openbsd.org, an *OpenBSD related* mailing list. Sorry David, My intention is to supplement information. Thank you! --- Luiz Gustavo Costa (Powered by BSD) *+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+ mund

Re: divert-to with bridge

On Mon, May 27, 2013 at 3:43 PM, Luiz Gustavo S. Costa wrote: > Hello Patrick ! > > Yes, I could not make it work, I'm using another environment that is working: > > FreeBSD 9.1-RELEASE with patch for use FORWARD and bridge Sure, but this is misc@openbsd.org, an *OpenBSD related* mailing list.

Re: divert-to with bridge

Hello Patrick ! Yes, I could not make it work, I'm using another environment that is working: FreeBSD 9.1-RELEASE with patch for use FORWARD and bridge These patch: http://www.mundounix.com.br/~gugabsd/tproxy_bridge_ipfw-9.1-RELEASE.diff Apply over a complete src of Freebsd 9.1-RELEASE Use ipf

Re: divert-to with bridge

Hi Luiz, I actually have seen that on a bridge setup I had, too. Although the divert-to points to localhost, I see the packet trying to pass out on the interface to the original destination, as your data shows, too. No idea why that's happening though. \Patrick Am 23.05.2013 um 22:45 schrieb L

divert-to with bridge

Hi List ! I'm trying to implement a firewall with squid TPROXY in an environment with bridge. vio0 = external if vio1 = internal if bridge0 = (vio0 + vio1) I have these rules, the connections pass through it, but nothing comes on the side of the divert-to (did tests with nc -l 3128) [17:31:25