[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-ipfw
Subject:    Re: Question about divert in ipfw2 on 5.0 release
From:       Maxim Konovalov <maxim () FreeBSD ! ORG>
Date:       2003-02-28 12:57:04
[Download RAW message or body]


Hello,

On 13:10+0300, Feb 28, 2003, denb wrote:

> I write program simular to natd, witch receives packets at divert port X.
> Question:
> On ipfw1 (FreeBSD 4.7) this rules work excellent:
>
> ipfw add divert X from any to any Y
> ipfw add divert X from any Y to any
>
> We're diverting all received and sended packets (from\to port Y) to divert port X.
> But these rules are not working together with ipfw2 (5.0 Release). Each single rule
> works fine, but when i combine them together only first of them triggers. The order
> doesn't matter.
>
> What am I doing wrong?

Can't reproduce:

# ipfw add 1 divert 1111 tcp from any to any 1973
00001 divert 1111 tcp from any to any dst-port 1973
# ipfw add 2 divert 1111 tcp from any 1973 to any
00002 divert 1111 tcp from any 1973 to any
# nc localhost 1973
# nc -p 1973 localhost 21
# ipfw show 1 2
00001          1         60 divert 1111 tcp from any to any dst-port 1973
00002          1         60 divert 1111 tcp from any 1973 to any

What am I doing wrong? :-)

-- 
Maxim Konovalov, maxim@macomnet.ru, maxim@FreeBSD.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message
[prev in list] [next in list] [prev in thread] [next in thread]