Chris Buechler wrote:
> On Tue, 8 Feb 2005 08:44:26 -0800, Brian Watters
> <brwatters at abs dash internet dot com> wrote:
>> Hello all,
>> In following the directions 100% @
>> http://m0n0.ch/wall/docbook/examples-filtered-bridge.html our bridge will
>> FLAT out not work, I wonder if there is any known issues with Bridging in
>> v1.2b3? .. The above doc is very straight forward and should work but ..
>> Could the online doc be missing any steps? .. Feedback please ...
> I'm not sure why everybody keeps claiming bridging is broken in b3. I
> have one in production which is what that write up is based on, and
> just set up another from scratch on a test network, following that
> step by step, to see if I could replicate any problems. I couldn't,
> it worked right off.
I am the original complainer, and I now have a bridged 1.2b3 in production
right now too. Mine didn't work "right off" though. I ran into plenty of
problems. However, at the moment, I have three bridge related problems
1.) There isn't a good way to NOT assign an IP to the WAN interface. This
is a problem if you've already assigned a static IP to the WAN. How
do you remove the IP? I had to manually edit my config.xml and then
Why would you want an IP-less bridge? I couldn't get my bridge to be
completely transparent with an IP on the WAN interface. The bridge
wouldn't pass traffic outside the WAN's subnet. This was a problem
for me because I have multiple subnets attached to the bridge. The
workaround is fairly simple, but I think this deserves some sort of
2.) Anti spoofing rules are preventing me from managing my bridged
m0n0wall from outside the LAN interfaces subnet. See this thread
for more info:
This problem exists currently on my production 4801.
3.) WAN interface sometimes steals packets from LAN interface when LAN
is used for management and OPT1 is bridged with WAN. See this post
I think some combination of these problems may have resulted in my initial
general misconceptions about bridging in 1.2b3. Only after testing numerous
configurations could I begin to identify discrete problems.
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v) 423-559-5145 (f)