Re: LOR with divert sockets

From: Andrea Venturoli <ml.diespammer@xxxxxxxxxxx>
Date: Wed, 28 Feb 2007 09:38:21 +0100

Robert Watson wrote:

What versions of ip_fw2.c and ip_divert.c were in use?

From i386/6.2-RELEASE-p1, i.e.:
src/sys/netinet/ip_fw2.c,v 1.106.2.21 2006/10/10 18:39:38 bz
src/sys/netinet/ip_divert.c,v 1.113.2.2 2006/05/16 07:27:48 ps

Also, could you let me know if you use any uid/gid rules in your IPFW rule set?

Yep.

04000 allow tcp from me to any uid squid out via xl0 setup keep-state

I use this to allow squid to retrieve everything according to its own security settings.

Thanks,

Thanks to you.

bye
av.

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Follow-Ups:
- Re: LOR with divert sockets
  - From: Bjoern A. Zeeb

References:
- LOR with divert sockets
  - From: Andrea Venturoli
- Re: LOR with divert sockets
  - From: Robert Watson

Prev by Date: Re: Need help with Broadcom wifi WLAN
Next by Date: Thinking about IPv6 and DEPRECATED addresses
Previous by thread: Re: LOR with divert sockets
Next by thread: Re: LOR with divert sockets
Index(es):
- Date
- Thread