Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Jul 2001 12:25:15 +0800
From:      "Chan" <llchan@eweb-asia.com>
To:        "Dennis White" <dennywhite@yahoo.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: IPFW error message
Message-ID:  <005301c1082f$2985bc40$25904bca@ewebasia.com>
References:  <20010709042401.36687.qmail@web13907.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Dennis,

I think you need IPDIVERT to be built in together...

IPDIVERT will enables the divert IP sockets, used by 'ipfw divert'

Regards,
Ling Ling
----- Original Message ----- 
From: "Dennis White" <dennywhite@yahoo.com>
To: "Chan" <llchan@eweb-asia.com>
Cc: <freebsd-questions@freebsd.org>
Sent: Monday, July 09, 2001 12:24 PM
Subject: Re: IPFW error message


> Here's the firewall part of the kernel config:
> options        IPFIREWALL
> options        IPFIREWALL_VERBOSE
> options        IPFIREWALL_VERBOSE_LIMIT=100
> options        IPFIREWALL_DEFAULT_TO_ACCEPT
> Hope that helps. This is like a test machine
> too. Just an old toshiba laptop I'm learning
> the os on.
> 
> --- Chan <llchan@eweb-asia.com> wrote:
> > Hi, Dennis,
> > 
> > Anyway, my one is a testing server. So, no problem of
> > installation. :-))
> > 
> > Do you mind to to post your kernel options for IPFIREWALL?
> > 
> > This might help:-
> > www.freebsd-howto.com
> > http://www.onlamp.com/lpt/a//bsd/2001/04/25/FreeBSD_Basics.html
> > 
> > Regards,Ling Ling
> > ----- Original Message ----- 
> > From: "Dennis White" <dennywhite@yahoo.com>
> > To: "Chan" <llchan@eweb-asia.com>
> > Cc: <questions-freebsd@freebsd.org>
> > Sent: Monday, July 09, 2001 10:59 AM
> > Subject: Re: IPFW error message
> > 
> > 
> > > Hi Ling Ling,
> > > Kernel secure level same as yours, -1. Left like that
> > > with the default to accept all in the kernel config
> > > & later to establish all security with rules set for
> > > rc.firewall & rc.conf. And you say you reinstalled
> > > entire freebsd again? Hate to do that if possible
> > > not to. Rather try to figure out how to fix it, but
> > > I may be forced to, now that all my experimenting &
> > > cvsup have been done. :-)
> > > 
> > > --- Chan <llchan@eweb-asia.com> wrote:
> > > > Hi, dennis,
> > > > 
> > > > Did you turn on the kernel securelevel? that's what happen
> > to
> > > > my baby
> > > > (freebsd). So, I think this will help you ...
> > > > You may want to take that option out since it will actually
> > > > create a lot  of
> > > > problems while compiling. Things went smooth when I
> > compiled
> > > > but it did not
> > > > work at all too ... Eventually, I re-install it, "re-make"
> > > > world and also
> > > > the kernel, and it runs !!!! Of course with the original
> > > > kernel_securelevel= -1 ... hehe
> > > > 
> > > > Regards,
> > > > Ling Ling
> > > > ----- Original Message -----
> > > > From: "Dennis White" <dennywhite@yahoo.com>
> > > > To: <evilfry@sg.freebsd.org>
> > > > Cc: <freebsd-questions@freebsd.org>
> > > > Sent: Monday, July 09, 2001 7:52 AM
> > > > Subject: Re: IPFW error message
> > > > 
> > > > 
> > > > > I'm getting the same error. Ran kldstat -v | grep ipf &
> > > > > got back "206 ipfw". Just learning about it, so had to
> > > > > guess that the 206 is the PID. Ran ps x | grep ipfw & got
> > > > > "344 v0 S+". Then I ran ps x | grep 206 & got
> > > > > "206 ?? Is  0:00:02 inetd -wW". Trying to find out if
> > it's
> > > > > not loading right. I have everything compiled into the
> > > > > kernel for IPFW support that's required, so not sure what
> > > > > the problem is, unless something's broken from cvsup,
> > which
> > > > > I did about a week & a half ago with no apparent ill
> > results
> > > > > at the time. Everything made & installed without any
> > errors.
> > > > > Only time consuming was in having to manually merge
> > several
> > > > > files, including rc.conf. Thanks.
> > > > >
> > > > >
> > > > > --- James Lim <evilfry@sg.freebsd.org> wrote:
> > > > > > -----BEGIN PGP SIGNED MESSAGE-----
> > > > > > Hash: SHA1
> > > > > >
> > > > > > Hi Ling Ling,
> > > > > >
> > > > > >
> > > > > > try checking whether ipfw is loaded correctly, kldstat
> > -v |
> > > > > > grep ipf
> > > > > > If it is not, try loading the module. The last time
> > that
> > > > > > happened was
> > > > > > due to an improper make world, although it was compiled
> > in
> > > > > > kernel.
> > > > > >
> > > > > > Hope this helps
> > > > > >
> > > > > > On the last episode Saturday 07 July 2001 16:45, Ling
> > Ling
> > > > > > wrote:
> > > > > > > Hi,
> > > > > > >
> > > > > > > I come across this error message in my FreeBSD-4.2
> > server
> > > > > > when I
> > > > > > > started firewall rules :
> > > > > > >
> > > > > > > ipfw: getsockopt(IP_FW_ADD): Invalid argument
> > > > > > >
> > > > > > > I had all IPFIREWALL kernel options built and when I
> > '
> > > > > > kldload -v |
> > > > > > > grep ipfw' the ipfw is there .... any clues on this
> > ??
> > > > > > >
> > > > > > > Thanks & Regards,
> > > > > > > Ling Ling
> > > > > >
> > > > > > - ----------------------------------------
> > > > > > Content-Type: text/html; charset="iso-8859-1";
> > > > > > name="Attachment: 1"
> > > > > > Content-Transfer-Encoding: quoted-printable
> > > > > > Content-Description:
> > > > > > - ----------------------------------------
> > > > > >
> > > > > > - --
> > > > > > Regards,
> > > > > > James Lim
> > > > > > http://sg.freebsd.org | http://www.bsd-geeks.org
> > > > > > -----BEGIN PGP SIGNATURE-----
> > > > > > Version: PGP 6.5.8
> > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> iQA/AwUBO0bWdZpTakonTMbIEQJztACfclm6Bu5zjOFnmUOVXLQPlQMClakAoL/F
> > > > > > YZLtCA26zEcwK2IdrWNYoyjW
> > > > > > =FGjS
> > > > > > -----END PGP SIGNATURE-----
> > > > > >
> > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > > > > with "unsubscribe freebsd-questions" in the body of the
> > > > message
> > > > >
> > > > >
> > > > > =====
> > > > > dennywhite@yahoo.com
> > > > > ICQ# 759271
> > > > > ===================================
> > > > > Unix is like a wigwam -- no gates,
> > > > > no windows, and an apache inside.
> > > > > ===================================
> > > > >
> > > > > __________________________________________________
> > > > > Do You Yahoo!?
> > > > > Get personalized email addresses from Yahoo! Mail
> > > > > http://personal.mail.yahoo.com/
> > > > >
> > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > > > with "unsubscribe freebsd-questions" in the body of the
> > > > message
> > > > 
> > > 
> > > 
> > > =====
> > > dennywhite@yahoo.com 
> > > ICQ# 759271 
> > > ===================================
> > > Unix is like a wigwam -- no gates,
> > > no windows, and an apache inside.
> > > ===================================
> > > 
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Get personalized email addresses from Yahoo! Mail
> > > http://personal.mail.yahoo.com/
> > 
> 
> 
> =====
> dennywhite@yahoo.com 
> ICQ# 759271 
> ===================================
> Unix is like a wigwam -- no gates,
> no windows, and an apache inside.
> ===================================
> 
> __________________________________________________
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005301c1082f$2985bc40$25904bca>