* Oliver Fromme <[EMAIL PROTECTED]> [2005-08-03 10:25 +0200]:
> Sten Daniel Sørsdal <[EMAIL PROTECTED]> wrote:
>  > Oliver Fromme wrote:
>  > > However, the problem is that the second option is being
>  > > ignored, and I would like to know why, and how to work-
>  > > around the bug.
>  > 
>  > Would this work?:
>  > 
>  > # ipfw add pass ip from me to $N out xmit xl0
> 
> No.  It wouldn't check the (non-existing) incoming interface.
> The "from me" pattern does not check any interfaces.  It only
> checks that the source IP in the packet is one of the locally
> configured IP addresses.

ipfw add deny ip from me to any in 
ipfw add pass ip from me to $N out xmit xl0

But I would like the 'not recv any' feature, too. At the moment I use
a static list.

Nicolas
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to