Re: Bridge questions

From: John Doe (JohnDoe_at_here.somewhere.com)
Date: 02/18/04 

Date: Wed, 18 Feb 2004 05:37:12 -0500

"ontop" <marvin_robotus...@yahoo.com> wrote in message
news:oCvYb.5445$w65.380191@news20.bellglobal.com...
> How do you filter on your bridge? Since the traffic is all PPPoE, do you
> have to filter on tun0?
>
> I'm not really sure how to filter the PPPoE traffic, since I was under the
> impression it had to be done on tun0, and I'm not really sure what that
is,
> and what has to be done to utilize it.

On the OpenBSD NAT router, I filter on tun0 (public interface) aside from
the bridges filter policies. I know it's redudant but my rules are really
funky now. I've had to allow certain ports in {to any}because of my ever
changing IPs.

As for the windows boxes without NAT, the bridge filters all traffic on the
external interface that's connected to the DSL modem.

Hope I made sense... I'll have to review my rules again soon and I'll paste
them here because I don't know if I'm making any sense... I'm off to take a
9 hour flight with 0 hours sleep in 3 days to work another 10 hours after...
;-(

Regards.

Relevant Pages

  • Re: Bridge questions
    ... How do you filter on your bridge? ... I'm not really sure how to filter the PPPoE traffic, ... impression it had to be done on tun0, and I'm not really sure what that is, ... I was not intending to use IPs for the interfaces on the bridge. ...
    (comp.unix.bsd.openbsd.misc)
  • Re: PF, bridge, states and window scaling problem
    ... My problem comes with the filter rules. ... the bridge use TCP window scaling. ... but not matched by the rest of the packets ... statefull firewall has an unpredictable behaviour on bridges. ...
    (freebsd-questions)
  • Re: more on pfil and bridging
    ... Instead of the bridge registering a separate filter queue for itself, ... bridged packets as "normal" L2 packets. ...
    (freebsd-net)
  • Re: PF, bridge, states and window scaling problem
    ... My problem comes with the filter rules. ... the bridge use TCP window scaling. ... pass out quick on vlan0 from anIP/32 to any keep state queue ul_client ... Try adding the flags switch as mentioned above. ...
    (freebsd-questions)
  • Re: more on pfil and bridging
    ... Instead of the bridge registering a separate filter queue for itself, ... It should register its own stack and each filter type should ... Ather and bridge need to be distinguishable. ... bridged packets as "normal" L2 packets. ...
    (freebsd-net)