Hi there,

   I'm trying to solve problem with 2nd OPT interface (ep0) which even has its rules defined in the
firewall ruleset provide no ip filtering. I found in status page that something added following
"pipe"

=============== CUT HERE ==================
***** ipfw show *****
00100 216  74224 allow ip from XX.XX.80.1 to any
00200  55   5526 allow ip from any to XX.XX.80.1
00300 132   7920 pipe 1 ip from any to XX.XX.81.0/24 via ep0
00400 130   7800 pipe 2 ip from XX.XX.81.0/24 to any via ep0
65535 473 202634 allow ip from any to any
=============== CUT HERE ==================

 in my config but have no idea where to switch off such "option". 

It seems that subnet behind the interface has no restrictions.

Is it a "feature" ?

Thx

Luki

--
Lukas Vondracek
luki at antos dash ecc dot net