IPFW divert and tag

M

moriya

I am using FreeBSD 8.1 with
Code: 
options IPFIREWALL_FORWARD

Is it possible to use divert (to nat) and tag at the same time ?

For example,
Code: 
divert 8668 ip from any to any tagged 10000
count ip from any to any tagged 10000
or

Code: 
divert 8668 tag 1111 ip from any to any tagged 10000
count ip from any to any tagged 1111
It looks for me the tag is gone away after diversion.
 
From the ipfw man page:
Code: 
             "Tags are "sticky", meaning once a tag is applied to a packet by a matching
             rule it exists until explicit removal.  Tags are kept with the
             packet everywhere within the kernel, but are lost when packet
             leaves the kernel, for example, on transmitting packet out to the
             network or sending packet to a divert(4) socket."
Click to expand...
 
At the time I posted it (a year ago), I looked for the way to apply a forwarding (fwd) rule to diverted packets. (There may have been several divert rules.)
But I gave up it because the service I thought looked no market.
Thank you anyway.
 
You must log in or register to reply here.
Back
Top