From owner-freebsd-questions Tue Jan 23 13:10: 9 2001 Delivered-To: freebsd-questions@freebsd.org Received: from itouch.co.nz (itouch.co.nz [203.99.66.188]) by hub.freebsd.org (Postfix) with ESMTP id 67BBC37B699 for ; Tue, 23 Jan 2001 13:09:46 -0800 (PST) Received: (from jonc@localhost) by itouch.co.nz (8.11.1/8.11.1) id f0NL6hB40902; Wed, 24 Jan 2001 10:06:43 +1300 (NZDT) (envelope-from jonc) Date: Wed, 24 Jan 2001 10:06:43 +1300 From: Jonathan Chen To: "Andrew J. Siegel" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw/nat Message-ID: <20010124100643.B39995@itouchnz.itouch> References: <000801c0857c$f7a5efe0$768a0218@htfdw1.ct.home.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <000801c0857c$f7a5efe0$768a0218@htfdw1.ct.home.com>; from structure@home.com on Tue, Jan 23, 2001 at 03:42:12PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote: > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL options > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2) > config'd and compile....did sysctl -a | grep fw...and fw.enable is set to > 1....ipfw show issues one allow all for static commands, and something > unknown for dynamic commands.. > > try adding ipfw add 500 divert natd all from any to any via rl0 > > and receive error: > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT This usually indicates that you haven't *installed* a kernel with IPDIVERT options set. Send the list of your dmesg output. -- Jonathan Chen | To do is to be -- Nietzsche | To be is to do -- Sartre | Scooby do be do -- Scooby To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message