From owner-freebsd-questions Wed Jan 24 20:50: 5 2001 Delivered-To: freebsd-questions@freebsd.org Received: from femail6.sdc1.sfba.home.com (femail6.sdc1.sfba.home.com [24.0.95.86]) by hub.freebsd.org (Postfix) with ESMTP id 4842C37B400 for ; Wed, 24 Jan 2001 20:49:45 -0800 (PST) Received: from toshiba ([24.2.138.118]) by femail6.sdc1.sfba.home.com (InterMail vM.4.01.03.00 201-229-121) with SMTP id <20010125044945.VOCU8664.femail6.sdc1.sfba.home.com@toshiba>; Wed, 24 Jan 2001 20:49:45 -0800 From: "Andrew J. Siegel" To: "'Jonathan Chen'" Cc: "Freebsd-Questions (E-mail)" Subject: RE: ipfw/nat Date: Wed, 24 Jan 2001 23:49:51 -0500 Message-ID: <007401c0868a$41870370$768a0218@htfdw1.ct.home.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal In-Reply-To: <20010124100643.B39995@itouchnz.itouch> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG IPDIVERT enabled, RULE-BASED FORWARDING ENABLED -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jonathan Chen Sent: Tuesday, January 23, 2001 4:07 PM To: Andrew J. Siegel Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw/nat On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote: > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL options > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2) > config'd and compile....did sysctl -a | grep fw...and fw.enable is set to > 1....ipfw show issues one allow all for static commands, and something > unknown for dynamic commands.. > > try adding ipfw add 500 divert natd all from any to any via rl0 > > and receive error: > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT This usually indicates that you haven't *installed* a kernel with IPDIVERT options set. Send the list of your dmesg output. -- Jonathan Chen | To do is to be -- Nietzsche | To be is to do -- Sartre | Scooby do be do -- Scooby To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message