Stefan Grefen <grefen@hprc.tandem.com> writes:

> Hmm man 5 ipf says there is the "to" keyword which allows you to switch
> packets directly to an interface bypassing the routing code.
> (this -current )
> 
> This should do the trick for IP-based protocols. 

Except that the NetBSD machine won't usually get the packets unless you
also fake ARP requests.  And now you're not a bridge, or at least not
a transparent one.

--Michael