vBulletin Search Engine Optimization
| |||||||
| Register | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| ||||
| On Fri, Mar 10, 2006 at 01:33:52PM +0100, uc.sheda wrote: > Just another little detail: I've found in the FAQ (6.6 - Setting up a network bridge > in OpenBSD, Filtering on a bridge) that pf rules have to be based only on one > interface of the bridge. How do I find which interface? Because the example show a > 'pass all' on both interfaces... I'm a bit lost about this point. > I think the sentance is a bit confusing. The idea is that you only filter on one interface but just pass the traffic on the other interface of the bridge. You need to explicitly pass the traffic if you have a default block rule. Traffic flowing through a bridge hits both interfaces and so it is necessary to add rules for both of them. In most cases you will just pass all traffic on one interface so you could use "set skip on" to ignore this interface completely. -- :wq Claudio |