https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203715
Bug ID: 203715
Summary: [pf] 'dup-to' option doesn't duplicate packets
Product: Base System
Version: 11.0-CURRENT
Hardware: amd64
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
uname -a:
FreeBSD freebsd11_master.kvm 11.0-CURRENT FreeBSD 11.0-CURRENT #0 r285616: Thu
Jul 16 02:21:59 UTC 2015
[email protected]:/usr/obj/usr/src/sys/GENERIC amd64
+----------+ +-----------+ +----------+
| | em0| |em1 | |
| host1 +--------+ FreeBSD +--------+ host2 |
| | | | | |
+----------+ +-----------+ +----------+
|em2
|
|
v
I have FreeBSD machine which forwards packets between host1 and host2. This
machine has also an additional interface (em2) which act as span interface -
all traffic between host1 and host2 is copied into it.
To achieve this scenario I can set bridge with em0 and em1 as members and em2
as span interface. But I would like to get same result using pf instead. So I
tried to use this rules:
pass out on em0 dup-to em2 no state
pass out on em1 dup-to em2 no state
But it doesn't work. No packets appear on interface em2. I've checked same
configuration on OpenBSD (version 5.7) and everything worked well.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"
