From joe@tao.org.uk  Sun May  8 12:45:12 2005
Return-Path: <joe@tao.org.uk>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 59C9D16A520
	for <freebsd-gnats-submit@freebsd.org>; Sun,  8 May 2005 12:45:12 +0000 (GMT)
Received: from mailhost.tao.org.uk (transwarp.tao.org.uk [212.135.162.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2B8C843D80
	for <freebsd-gnats-submit@freebsd.org>; Sun,  8 May 2005 12:45:11 +0000 (GMT)
	(envelope-from joe@tao.org.uk)
Received: by mailhost.tao.org.uk (Postfix, from userid 1000)
	id 09A6EA62A; Sun,  8 May 2005 13:44:44 +0100 (BST)
Message-Id: <20050508124444.GA77968@transwarp.tao.org.uk>
Date: Sun, 8 May 2005 13:44:44 +0100
From: Josef Karthauser <joe@FreeBSD.org>
To: Gavin Atkinson <gavin.atkinson@ury.york.ac.uk>
Cc: FreeBSD-gnats-submit@freebsd.org
In-Reply-To: <20050507131437.C72452@ury.york.ac.uk>
Subject: (i386/80572) Re: ipfw broken with bridge under 5.x (5.3 and 5.4)
References: <20050502200413.GB46745@genius.tao.org.uk> <20050502202122.GC46745@genius.tao.org.uk> <20050504142425.GB710@genius.pact.cpes.susx.ac.uk> <1115226802.49427.16.camel@buffy.york.ac.uk> <20050504171851.GB1863@genius.tao.org.uk>

>Number:         80761
>Category:       i386
>Synopsis:       (i386/80572) Re: ipfw broken with bridge under 5.x (5.3 and 5.4)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-i386
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 08 12:50:02 GMT 2005
>Closed-Date:    Mon May 09 21:51:12 GMT 2005
>Last-Modified:  Thu Dec 18 03:40:46 UTC 2008
>Originator:     
>Release:        
>Organization:
>Environment:
>Description:
 --ew6BAiZeqk4r7MaW
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 On Sat, May 07, 2005 at 01:16:01PM +0100, Gavin Atkinson wrote:
 > >
 > >It appears that the solution is obtained by adding the rule:
 > >
 > >   allow ip from any to any layer2 mac-type arp
 > >
 > >to the beginning of the firewall list.  IPFW2 drops non-IP traffic
 > >whereas IPFW1 passes it though.  This is the reason why my configuration
 > >stopped working after the upgrade.
 >=20
 > Ah-ha!  This also seems to have fixed it for me.  There are a few bits of=
 =20
 > documentation which should probably be updated with this, I'll submit a=
 =20
 > patch in a day or two.
 >=20
 
 Hey Gavin,
 
 Good call.  I've added the gnats ticket that I opened on this problem to
 the Cc line.  If you could group reply with the patches then it will get
 added to the ticket too. :)
 
 Thanks,
 Joe
 --=20
 Josef Karthauser (joe@tao.org.uk)	       http://www.josef-k.net/
 FreeBSD (cvs meister, admin and hacker)     http://www.uk.FreeBSD.org/
 Physics Particle Theory (student)   http://www.pact.cpes.sussex.ac.uk/
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an=
 d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
 
 --ew6BAiZeqk4r7MaW
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.0 (FreeBSD)
 
 iEYEARECAAYFAkJ+CaoACgkQXVIcjOaxUBaaywCdHIqkxYzTLry5bJkK5L3FSksb
 loQAnA2a/7Buyzt4AwlkDkpuwwm+gtcc
 =w+s5
 -----END PGP SIGNATURE-----
 
 --ew6BAiZeqk4r7MaW--
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: linimon 
State-Changed-When: Mon May 9 21:50:41 GMT 2005 
State-Changed-Why:  
Misfiled followup to i386/80572; content migrated. 


Responsible-Changed-From-To: gnats-admin->freebsd-i386 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Mon May 9 21:50:41 GMT 2005 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=80761 
>Unformatted:
