From owner-freebsd-questions Wed Jan 24 0:11: 4 2001 Delivered-To: freebsd-questions@freebsd.org Received: from siafu.iconnect.co.ke (upagraha.iconnect.co.ke [209.198.248.2]) by hub.freebsd.org (Postfix) with ESMTP id 5F27937B401 for ; Wed, 24 Jan 2001 00:10:44 -0800 (PST) Received: from [64.110.74.50] (helo=poeza.iconnect.co.ke) by siafu.iconnect.co.ke with esmtp (Exim 2.12 #1) id 14LKzU-000Cza-00 for freebsd-questions@freebsd.org; Wed, 24 Jan 2001 11:09:17 +0300 Received: from wash by poeza.iconnect.co.ke with local (Exim 3.20 #1) id 14LL1H-000Caj-00 for freebsd-questions@FreeBSD.ORG; Wed, 24 Jan 2001 11:11:07 +0300 Date: Wed, 24 Jan 2001 11:11:07 +0300 From: Corvette To: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw/nat Message-ID: <20010124111107.J46467@poeza.iconnect.co.ke> Mail-Followup-To: Corvette , freebsd-questions@FreeBSD.ORG References: <000801c0857c$f7a5efe0$768a0218@htfdw1.ct.home.com> <20010124100643.B39995@itouchnz.itouch> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010124100643.B39995@itouchnz.itouch>; from "Jonathan Chen" on Wed, Jan 24, 2001 at 10:06:43AM +1300 X-Operating-System: FreeBSD poeza.iconnect.co.ke 4.2-STABLE FreeBSD 4.2-STABLE X-Location: Mombasa, KE, East Africa Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG * Jonathan Chen [20010124 09:24]: writing on the subject 'Re: ipfw/nat' Jonathan> On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote: Jonathan> > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL options Jonathan> > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2) Jonathan> > config'd and compile....did sysctl -a | grep fw...and fw.enable is set to Jonathan> > 1....ipfw show issues one allow all for static commands, and something Jonathan> > unknown for dynamic commands.. Jonathan> > Jonathan> > try adding ipfw add 500 divert natd all from any to any via rl0 Jonathan> > Jonathan> > and receive error: Jonathan> > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT Jonathan> Jonathan> This usually indicates that you haven't *installed* a kernel with Jonathan> IPDIVERT options set. Send the list of your dmesg output. He can also read ALL the details there is: www.defcon1.org/html/NATD-config/firewall-setup/ipfw-1.html WARNING: Copy and paste this URL!! If you change anything you'll say it is broken. -Wash -- Odhiambo Washington Inter-Connect Ltd., wash@iconnect.co.ke 5th Flr Furaha Plaza Tel: 254 11 222604 Nkrumah Rd., Fax: 254 11 222636 PO Box 83613 MOMBASA, KE. You can kill a thousand; you can bring an end to life; you cannot kill an idea. -Acting Israeli Prime Minister Shimon Peres on the assassination of Prime Minister Yitzhak Rabin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message