Hi,

I'm trying to implement a bridging firewall at home and for some reason that i am yet to discover...it's not working!

Here goes the basic info:
-2 realtek 8139 chipset NIC(different vendors, but i think that's alright) on the bridging firewall(BF)
-2 NIC:NVIDIA nForce Networking Controller and Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller on the desktop(D-which soon will be protected...i hope)

They are connected this way:
8139(device name rl0)<-----cat5 cable----->NVIDIA nForce Networking Controller
8139(device name rl1)<-----crossed over cat5 cable---->Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller

Openbsd3.6(patched) configuration:
/etc/rc.conf everything turned off but pf.
/etc/bridgename0.bridge0 add rl0 add rl1 up
/etc/hostname.rl0 up
/etc/hostname.rl1 up
/etc/pf.conf #nothing yet

Things that i don't understand at bootup and may be of any value:
route: myname: bad adress

And finally ifconfig -a:
lo0...
rl0 active...
rl1 active...
pflog0...
pfsync0...
enc0...
bridge0: flags=41<UP,RUNNING> mtu 1500

And that's that, any ideas.

Well, first of all, you're description of the problem isn't really detailed enough. "not working" can cover *many* things. Are you not able to pass packets at all, or are you not able to resolve names or are you not able to browse the www or what?

Also -- are the nForce and Yukon cards detected? I know the nForce based on the 3com is supported, but you don't mention which you have. I see no mention of a Yukon anything in the HCL for i386 (though I admit a total lack of experience with those cards, and some of the Marvel stuff is supported).

It's also not entirely clear from your description exactly what it is you're trying to do ... Are all 4 of these interfaces in the same machine? If so, why do you have them cabled to each other?

Last but not least ... Assuming you get all the NICs working and all that -- is your pf configured to pass or drop by default?

What's in your /etc/myname file?

Try disabling pf with 'pfctl -d' first to make sure the bridge itself is working.

I'm also confused about how you have things wired up. You should only need one NIC on your desktop PC, and it should be connected to one side of the bridge (e.g. one of the two NICs in your BSD bridge box.) The other side of the bridge should be connected to your source for Internet connectivity, or the LAN you're getting a connection from.