Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Feb 2001 01:20:37 -0800
From:      "Crist J. Clark" <cjclark@reflexnet.net>
To:        Kathy Quinlan <katinka@magestower.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Natd errors
Message-ID:  <20010222012037.F89396@rfx-216-196-73-168.users.reflex>
In-Reply-To: <001001c09c82$9980a3c0$fe00a8c0@kat.lan>; from katinka@magestower.com on Thu, Feb 22, 2001 at 11:50:27AM %2B0800
References:  <00f901c09c73$7e036e20$fe00a8c0@kat.lan> <007001c09c81$9de33000$0d01a8c0@casystems.net> <001001c09c82$9980a3c0$fe00a8c0@kat.lan>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 22, 2001 at 11:50:27AM +0800, Kathy Quinlan wrote:
> I have the following option in my kernel :
> 
> options         IPFIREWALL_VERBOSE
> 
> but I still do not see which rule is causing it
> 
> any ideas ?

You did put the 'log' key word in the suspect 'deny' rules?

> or is their a log file somewhere that logs these errors ?
> or can I redirect these errors to a file, as all I get in /va/log/messages
> and on the console is the natd104 error and not a rule # responsible.

The log information generated by ipfw is sent to syslog as
security.info. 

> also is their a list of error messages anywhere ?

You can often find out what an error message for a specific program
means on it manpage or other documentation. Frankly, there are wa-ay
too many to put all errors that any program could produce in one
place. 

> like if I get an error how do I find what it is as like the natd104 was not
> very helpful.

Here was the log entry you gave (format recovered),


> > > Feb 22 10:00:05 serverbsd natd[104]: failed to write packet back (Permission denied)
      \_____________/ \_______/ \__/ \_/   \_____...
       date and time    host     |    |     message
                             program  |
                                     PID

'natd' is the program that sent the message and '104' its process ID
number.
-- 
Crist J. Clark                           cjclark@alum.mit.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010222012037.F89396>