Filtering Bridge Traffic on layer IP

Hi to all,
i've configured a freebsd box bridge. This machine have 2 ethernet card
and i configure them with one ip address. I also configure firewalling
with ipfw on this box.
Is there a possibility to filter bridged traffic with ipfw on layer IP?
I need to allow some machine with some ip to access to internet and the
other not.
I cannot implemet nat-firewalling because i need to not change actual ip
configuration on my lan.
Have you any suggestion?
Thanks in advance
Antonio

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: ARP Question - Maybe?
    ... I have configured the bridge and ... > I'm not really sure but I suspect my problem might be with ARP? ... > the web based configuration utility. ... > setup ipfw to log all traffic to that interface and can see the traffic ...
    (freebsd-questions)
  • Re: Filtering Bridge Traffic on layer IP
    ... i've configured a freebsd box bridge. ... I also configure firewalling ... Is there a possibility to filter bridged traffic with ipfw on layer IP? ... configuration on my lan. ...
    (freebsd-net)
  • [opensuse] Bridge setup to late (in network remotefs) phase after updating from 11.0 to 11.1
    ... I´ve a bridge setup with sets up a bridge from a TAP device tap0 and ... ethernet device eth0. ... Starting service MySQL Starting News-Server INNBoth fetchall and keep on in daemon or idle mode is a mistake! ... Starting Avahi DNS Configuration daemon failed ...
    (SuSE)
  • stealth firewall problem
    ... somethimes i get the "kernel panic" message with some errors on the bridge kernel module. ... the klogd jumped to 99% of cpu and my machine freozed many times. ... here is the kernel config part where i set the networking support: ... # IP: Virtual Server Configuration ...
    (Linux-Kernel)
  • 5.4 -- bridging, ipfw, dot1q
    ... I'm setting up a bridging firewall where the packets are passing through ... assume the bridge at least sees the packets). ... My only guess is that ipfw doesn't have the brains to look beyond the VLAN ... or because of the dot1q headers. ...
    (freebsd-hackers)