Bridging firewall without ip question

From: Don Mohlmaster (freebsd-isp_at_mistif.org)
Date: 07/27/04

  • Next message: Nobody: "SONIC TIMEWORKS AUTOMATED REPLY"
    To: <freebsd-isp@freebsd.org>
    Date: Tue, 27 Jul 2004 10:29:59 -0400
    
    

    I am currently running a Bridged firewall that is setup with three
    interfaces. Two interfaces are bridged and have no ip address assigned
    to either of them. The third interface is set up for administration and
    is not configured in the bridge group. It is locked up tight. The
    issue is, I am constantly receiving the following error message:
     
    /kernel: arp: *MACADDRESS of one of the bridged ifaces* is using my IP
    address *IPADDRESS of the administrative interface*
     
    The bridge is passing traffic, filtering, logging without issue. But, I
    do not like the fact that it's unhappy. Any suggestions?
     
    FreeBSD 4.9-RELEASE-p11 #5
    Ipfw
    Bridging compiled into kernel
    Rc.conf configured only one iface (administrative with ip address)
     
     
    Thank you,
    Don
    CPU-NET.Com, Inc Customer Service
     
    http://www.cpu-net.com <http://www.cpu-net.com/>
    http://www.cpu-hosting.com <http://www.cpu-hosting.com/>
     
     
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"


  • Next message: Nobody: "SONIC TIMEWORKS AUTOMATED REPLY"

    Relevant Pages

    • Re: distributed bridging [script]
      ... >> I'm trying to create a configuration that would bridge interfaces on ... Each host would have at least two interfaces, ... here's a completely untested script. ...
      (freebsd-net)
    • Re: bridge with access on both interfaces
      ... >>'inside' and 'outside' IPs separately on each bridge interface, ... Some tcpdumps on both in and outside interfaces suggest an ARP ... > If you want to use IP while bridging, ... and net4801 is that the 3 ethernet controllers now share one interrupt. ...
      (freebsd-net)
    • [BUG][debian-2.6.20-1-686] bridging + vlans + "vconfig rem" == stuck kernel
      ... I've managed to fairly reliably trigger a deadlock in some portion of the linux networking code on my Debian test box. ... I'm pretty sure that it's a race condition of some sort as it doesn't trigger if I ifdown the interfaces one by one, but if I run "ifdown -a" then it triggers halfway through reliably. ... Just for a bit of background on why this is so complex: When I get this networking problem sorted out I'm going to set up heartbeat and a dummy "world1" interface with a shared MAC which is added to the "world" bridge when the current system is the DHCP-client master. ...
      (Linux-Kernel)
    • Re: IPS-Builder
      ... I' d like to share with all, this script made by me based on root0 ... You need 3 network interfaces (One for management and two for the bridge) ... -This have a management interface. ...
      (Focus-IDS)
    • Re: bridge issues with pf rules on OpenBSD/Sparc
      ... > assigned so that clients on the bridged interfaces can access the ... > time, regardless of bridge state. ... > rule pass in on le0 tag t_lan ... > rule pass in on le2 tag t_wap ...
      (comp.unix.bsd.openbsd.misc)