From owner-freebsd-questions  Tue Dec  5 23:29:29 2000
From owner-freebsd-questions@FreeBSD.ORG  Tue Dec  5 23:29:24 2000
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from fe090.worldonline.dk (fe090.worldonline.dk [212.54.64.152])
	by hub.freebsd.org (Postfix) with SMTP id 3D9D237B401
	for <freebsd-questions@freebsd.org>; Tue,  5 Dec 2000 23:29:24 -0800 (PST)
Received: (qmail 16173 invoked by uid 0); 6 Dec 2000 07:29:21 -0000
Received: from 99.ppp3-1.worldonline.dk (HELO FLONIDANPC18) (212.54.75.99)
  by fe090.worldonline.dk with SMTP; 6 Dec 2000 07:29:21 -0000
Message-ID: <022a01c05f56$14511c20$7d01a8c0@FLONIDAN>
From: "joskis" <joskis@xxx.lt>
To: <freebsd-questions@freebsd.org>
References: <019601c05eca$315b36c0$7d01a8c0@FLONIDAN> <3A2D18AF.6C8E78EA@optonline.net>
Subject: Re: freebsd 4.2 & ipfilter
Date: Wed, 6 Dec 2000 08:28:06 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

hi,

here is updated info:
securitylevel is -1 (i think, anyway, i did'nt changed it)
---
host# ls ip*
ipauth  ipl     ipnat   ipstate
---

i am trying to load rules not from rc.network, but by hand. invoking:
ipf -Fa -f /etc/ipf.rules

but ;) the first rule was wrong. so i changed it. and everything  seems to
work (including from rc.network)

thanks,
joskis
----- Original Message -----
From: "trini0" <trini0@optonline.net>
To: "joskis" <joskis@xxx.lt>; "FreeBSD Questions" <questions@freebsd.org>
Sent: Tuesday, December 05, 2000 5:32 PM
Subject: Re: freebsd 4.2 & ipfilter


> Im still a newbie, but here goes......
>
> joskis wrote:
>
> > hi,
> >
> > i have a error, when loading rules for ipfilter:
> > ---
> > host#  ipf -Fa -f /etc/ipf.rules
> > 1:ioctl(add/insert rule): No such process
>
> make sure ipfil, ipauth, ipnat & ipstat are in /dev
>
> >
> > ---
> >
> > ipfilter is compiled into kernel.
> > after that, i test ipfilter:
> > ---
> > host# ipstat -i -o
> > ---
> >
>
> "ipfstat"
>
> >
> > and rules seems to be added.
> > why ipfilter shows this message? and how fix it?
> >
>
> The only other thing I could think of is that your security level is set
to
> high.
> Reconfigure /etc/rc.conf and uncomment out kern_securitylevel &
> kern_securitylevel_enable.  Reboot and try the ipf command again.
>
> >
> > and plius, the kernel options: ipdivert & ipstealth are for ipfirewall
or
> > for ipfilter also?
> >
>
> They are for ipfirewall only......
>
> >
> > thanks,
> > joskis
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
>
> --
>
>          _____________________________
>          |          trini0           |
>          |                           |
>      / ) | Systems Administrator     |
>     / /  | Network Engineer          |
>    ( (   | email ==>                 |
>  (((\ \> |/ )  trini0@optonline.net  |
>  (\\\\ \_/ /_________________________|
>   \       /
>    \    _/
>    /   /
>   /   /
>
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message