Subject: Fun with bridge(4)
To: NetBSD tech-net mailing list <tech-net@netbsd.org>
From: Julian Coleman <jdc@coris.demon.co.uk>
List: tech-net
Date: 03/16/2003 13:55:56
Thought I'd try out bridging.  I've noticed a few funnies with it.  Config
is two interfaces le0 and le1 in the bridge group.  le0 has IPv4 address
81.2.110.41 and alias 192.168.13.8.  le0 is configured without an IPv4
address.  Default route is 81.2.110.33 (the only box behind le1).

  With IPv6, 30 seconds after the bridge is configured up, the machine stops
  transmitting IPv6 packets.  Configuring ipf on the bridge stops the
  trasmission instantly (no, I'm not blocking it in my ipf6 rules!).

  ipf sees packets from machines on the 192.168.13.0/24 network as inbound
  on le1 (they came in on le0).

  I thought I'd try out IPNAT (mapping addresses on 192.168.13.0/24 to
  81.2.110.41).  I was suprised that it almost worked.  Entries appeared in
  the mapping list and outbound packets were visible on le1.  The inbound
  replies didn't generate a packet on le0 though.  Also, the machines' own
  192.168.13.8 address was translated, stopping communication with machines
  on 192.168.13.0/24.

Apart from this, it seems to be fine with IPv4 and ipf.

J

PS.  sparc 1.6P (built roughly 10 March)

-- 
                    My other computer also runs NetBSD
                          http://www.netbsd.org/