Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Jun 2000 09:23:34 +0400
From:      "Konstantin S. Kurianoff" <calman@kaliostro.crimea.com>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   ipfw: socket: Permission denied.
Message-ID:  <000801bfcc52$b3282380$4700a8c0@kaliostro.crimea.com>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_0005_01BFCC74.395F9020
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

Please help me in my touble.
I had configured a kernel (file /usr/src/sys/i386/conf/MyKernel) with =
following options in it:

options IPFIREWALL
options IPFIREWALL_VERBOSE
options "IPFIREWALL_VERBOSE=3D10"
options IPDIVERT
options DUMMYNET

I had make a kernel with these commands:=20
config MyKernel
cd ../../compile/MyKernel
make depend
make
make install.

In file /etc/rc.conf i wrote firewall_type=3D"OPEN"
In file /etc/rc.firewall i wrote:
    net=3D"212.3.116.0"
    netmask=3D"255.255.255.252"
    ip=3D"212.3.116.90"
and i have not changed the rules for firewall_type=3D"OPEN" - i used =
default rules for this section.

When server rebooted it said: "Ipfirewall modules loaded. Ipdivert =
disabled (?)."
When it red /etc/rc.firewall it said "Rules loaded".

As I saw in rc.firewall the main rule for "OPEN" firewall type is "allow =
all from any to any".=20

So, SENDMAIL said while booting:=20
gethostbyaddr (212.3.116.90) : failed(1)
Jun 1 17:15:30 spark mail.local: sendto biff: Permission denied.

When i wish to ping something it says: ping: sendto: Permission denied.
And if i want to tell the server "ipfw add 65534 allow all from any to =
any" it says:
ipfw: socket: Permission denied.

Please tell me what is a problem? My FreeBSD version is 2.2.8

Thank you, calman@kaliostro.crimea.com

------=_NextPart_000_0005_01BFCC74.395F9020
Content-Type: text/html;
	charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dkoi8-r" http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2614.3500" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3D"Arial Cyr" size=3D2>Please help me in my =
touble.</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>I had configured a kernel (file=20
/usr/src/sys/i386/conf/MyKernel) with following options in =
it:</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>options IPFIREWALL</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>options =
IPFIREWALL_VERBOSE</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>options =
"IPFIREWALL_VERBOSE=3D10"</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>options IPDIVERT</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>options DUMMYNET</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>I had make a kernel with these =
commands:=20
</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>config MyKernel</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>cd =
../../compile/MyKernel</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>make depend</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>make</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>make install.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>In file /etc/rc.conf i wrote=20
firewall_type=3D"OPEN"</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>In file /etc/rc.firewall i=20
wrote:</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>&nbsp;&nbsp;&nbsp;=20
net=3D"212.3.116.0"</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>&nbsp;&nbsp;&nbsp;=20
netmask=3D"255.255.255.252"</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>&nbsp;&nbsp;&nbsp;=20
ip=3D"212.3.116.90"</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>and i have not changed the rules =
for=20
firewall_type=3D"OPEN" - i used default rules for this =
section.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>When server rebooted it said: =
"Ipfirewall=20
modules loaded. Ipdivert disabled (?)."</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>When it red /etc/rc.firewall it =
said "Rules=20
loaded".</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>As I saw in rc.firewall the main =
rule for=20
"OPEN" firewall type is "allow all from any to any". </FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>So, SENDMAIL said while booting:=20
</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>gethostbyaddr (212.3.116.90) :=20
failed(1)</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>Jun 1 17:15:30 spark mail.local: =
sendto biff:=20
Permission denied.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>When i wish to ping something it =
says: ping:=20
sendto: Permission denied.</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>And if i want to tell the server =
"ipfw add=20
65534 allow all from any to any" it says:</FONT></DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>ipfw: socket: Permission =
denied.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>Please tell me what is a problem? =
My FreeBSD=20
version is 2.2.8</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Arial Cyr" size=3D2>Thank you,=20
calman@kaliostro.crimea.com</FONT></DIV></BODY></HTML>

------=_NextPart_000_0005_01BFCC74.395F9020--



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000801bfcc52$b3282380$4700a8c0>