From owner-freebsd-questions Fri Jan 26 12: 7:41 2001 Delivered-To: freebsd-questions@freebsd.org Received: from femail9.sdc1.sfba.home.com (femail9.sdc1.sfba.home.com [24.0.95.89]) by hub.freebsd.org (Postfix) with ESMTP id 4D3D037B401 for ; Fri, 26 Jan 2001 12:07:22 -0800 (PST) Received: from c93041a ([24.2.138.118]) by femail9.sdc1.sfba.home.com (InterMail vM.4.01.03.00 201-229-121) with SMTP id <20010126200721.YRNY1392.femail9.sdc1.sfba.home.com@c93041a>; Fri, 26 Jan 2001 12:07:21 -0800 From: "Andrew J. Siegel" To: "'Mikel King'" , "Freebsd-Questions (E-mail)" Subject: RE: ipfw/nat Date: Fri, 26 Jan 2001 15:07:16 -0500 Message-ID: <004201c087d3$94efb300$768a0218@htfdw1.ct.home.com> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) In-Reply-To: <3A700BEC.FA5DCFC@ocsinternet.com> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG i think forward would cause inability to enter commands in ipfw...still have no luck entering anything. -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Mikel King Sent: Thursday, January 25, 2001 6:20 AM To: Andrew J. Siegel Cc: 'Jonathan Chen'; Freebsd-Questions (E-mail) Subject: Re: ipfw/nat recommend not to use the IPFORWARD option thus; RULE-BASED FORWARDING DISABLED as I have had problems with NATD and this option running on 4.2... Cheers, Mikel "Andrew J. Siegel" wrote: > IPDIVERT enabled, RULE-BASED FORWARDING ENABLED > > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jonathan Chen > Sent: Tuesday, January 23, 2001 4:07 PM > To: Andrew J. Siegel > Cc: freebsd-questions@FreeBSD.ORG > Subject: Re: ipfw/nat > > On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote: > > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL > options > > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2) > > config'd and compile....did sysctl -a | grep fw...and fw.enable is set to > > 1....ipfw show issues one allow all for static commands, and something > > unknown for dynamic commands.. > > > > try adding ipfw add 500 divert natd all from any to any via rl0 > > > > and receive error: > > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT > > This usually indicates that you haven't *installed* a kernel with > IPDIVERT options set. Send the list of your dmesg output. > -- > Jonathan Chen | To do is to be -- Nietzsche > | To be is to do -- Sartre > | Scooby do be do -- Scooby > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message