From owner-FreeBSD-net-jp@jp.freebsd.org  Tue Dec 19 23:42:44 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id XAA29932;
	Tue, 19 Dec 2000 23:42:44 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from chamomile.mlab.t.u-tokyo.ac.jp (chamomile.mlab.t.u-tokyo.ac.jp [133.11.87.225])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id XAA29927
	for <freebsd-net-jp@jp.freebsd.org>; Tue, 19 Dec 2000 23:42:44 +0900 (JST)
	(envelope-from kaneko@mlab.t.u-tokyo.ac.jp)
Received: (qmail 14723 invoked from network); 19 Dec 2000 14:42:43 -0000
Received: from sunflower.mlab.t.u-tokyo.ac.jp (192.168.1.1)
  by chamomile.mlab.t.u-tokyo.ac.jp with SMTP; 19 Dec 2000 14:42:43 -0000
Received: (qmail 15503 invoked from network); 19 Dec 2000 14:42:43 -0000
Received: from kabile.mlab.t.u-tokyo.ac.jp (HELO 192.168.1.90) (192.168.1.90)
  by sunflower.mlab.t.u-tokyo.ac.jp with SMTP; 19 Dec 2000 14:42:43 -0000
Message-Id: <20001219234245.Postino-025058@mailhost.mlab.t.u-tokyo.ac.jp>
Date: Tue, 19 Dec 2000 23:42:45 +0900
To: freebsd-net-jp@jp.freebsd.org
From: Kunitake KANEKO <kaneko@mlab.t.u-tokyo.ac.jp>
X-Mailer: PostinoPalma Version 1.2
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2892
Subject: [FreeBSD-net-jp 2892] divert program on bridge
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: kaneko@mlab.t.u-tokyo.ac.jp

$B6b;R$H?=$7$^$9!#(B

bridge box$B$G!"(Bdivert$B%W%m%0%i%`$rF0:n$5$;$h$&$H;W$C$F$$$^$9!#(B
bridge$B$r(Benable$B$K$7$J$+$C$?:]$K$O!"(Bdivert$B%W%m%0%i%`$OF0:n$7$^$9!#(B

kernel option$B$O!"(B
options         BRIDGE
options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPDIVERT
options         DUMMYNET
options         HZ=1000
$B$G$9!#(B

bridge$B$r(Benable$B$K$9$k$H!"(B
bs1# sysctl -w net.link.ether.bridge=1
net.link.ether.bridge: 0 -> 1
bs1# sysctl -w net.link.ether.bridge_ipfw=1
net.link.ether.bridge_ipfw: 0 -> 1


ipfw$B$G$O!"%^%C%A$7$F$$$k$N$K$b4X$o$i$:(B

00100 1634 68626 allow ip from any to any via lo0
00200    0     0 deny ip from any to 127.0.0.0/8
06000    4   224 divert 8000 tcp from 192.168.131.240 to any
65000  664 51176 allow ip from any to any
65535    0     0 deny ip from any to any

$B%W%m%0%i%`B&$G$O!"%Q%1%C%H$,<u$1<h$l$^$;$s!#(B
$B%k!<%k$O!"(Bbridge$B$rMxMQ$7$J$+$C$?;~$HF1$8$b$N$G$9!#(B


$B0J>e!"$h$m$7$/$*4j$$$$$?$7$^$9!#(B

---
kaneko@mlab.t.u-tokyo.ac.jp
