Date: Tue, 6 Feb 2001 10:29:58 -0800 From: Alfred Perlstein <bright@wintelcom.net> To: Luigi Rizzo <rizzo@aciri.org> Cc: net@freebsd.org Subject: IPFIREWALL + BRIDGE + IPDIVERT doesn't work? Message-ID: <20010206102958.N26076@fw.wintelcom.net>
next in thread | raw e-mail | index | archive | help
Let me apologize in advance for this shoddyish bug report. In a recent -stable (since the new ipfw fixes) if you build a kernel with options: IPFIREWALL IPFIREWALL_VERBOSE IPFIREWALL_DEFAULT_TO_ACCEPT IPDIVERT BRIDGE DUMMYNET You wind up with a kernel that doesn't grok the ipfw 'via' keyword. Basically any rule that has a 'via' in it makes the userland ipfw tool get a 'invalid setsockopt'. Anyone booting a kernel on a system that relies on 'via' keywords is in for a big suprise as all those rules won't load. -- -Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org] "I have the heart of a child; I keep it in a jar on my desk." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010206102958.N26076>