Hello, In the past I have used this patch by Luigi Rizzo, which helped me well.
http://lists.freebsd.org/pipermail/freebsd-ipfw/2003-September/000526.html I tried with a friend to port it to -STABLE, but we were not able to find out what has replaced mt_tag. Also on ip_input.c we dirty hacked to following piece of code: #ifdef IPFIREWALL_FORWARD if (m->m_flags & M_FASTFWD_OURS) { m->m_flags &= ~M_FASTFWD_OURS; goto pass; /* XXX was 'ours' - SHOULD WE MODIFY IT HERE */ } if ((dchg = (m_tag_find(m, PACKET_TAG_IPFORWARD, NULL) != NULL)) != 0) { /* * Directly ship the packet on. This allows forwarding * packets originally destined to us to some other directly * connected host. */ ip_forward(m, dchg); return; } #endif /* IPFIREWALL_FORWARD */ And this is something we are not sure if its correct. So my very obvious question is: Does anyone has a recent version of this patch to share? Can anyone familiar with ipfw source code help me with that? -- =========== Eduardo Meyer pessoal: dudu.me...@gmail.com profissional: ddm.farmac...@saude.gov.br _______________________________________________ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
