Bridging and IPFW

2005-06-01 Thread George Breahna
Hey guys, hope I posted this to the right list! I recently installed version 5.4 on a computer that acts as a gateway/firewall/bridge for a LAN. There are 30 or so computers sitting behind interface rl1 which has no IP address assigned. rl1 is bridged to rl0 which is the external interface and w

Re: [PATCH] ipv4 only rules (test and feedback)

2005-06-01 Thread Max Laier
Updated patch attached, please see below for details. I plan to commit this very soon now, so please test and scream *now* if anything breaks! On Wednesday 25 May 2005 16:34, Max Laier wrote: > All, > > with the recent merge of IPv6 functionality into ipfw2, ip6fw is obsolete. > As the latter i

dynamic rule deadlock

2005-06-01 Thread Brian Fundakowski Feldman
This is a pretty easy one to diagnose. In FreeBSD 5.x+, there are network interface locks that the ifnet::if_start() routines grab and the IPFW dynamic rule lock that IPFW grabs. When IPFW periodically runs its dynamic rule keepalive event, it tries to grab the locks in the order: IPFW dynamic ru