From owner-freebsd-stable@FreeBSD.ORG Fri Nov 23 08:48:35 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 35C301FF for ; Fri, 23 Nov 2012 08:48:35 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: from mail-qc0-f182.google.com (mail-qc0-f182.google.com [209.85.216.182]) by mx1.freebsd.org (Postfix) with ESMTP id D20178FC13 for ; Fri, 23 Nov 2012 08:48:34 +0000 (UTC) Received: by mail-qc0-f182.google.com with SMTP id k19so7922029qcs.13 for ; Fri, 23 Nov 2012 00:48:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=r2tgqW2O7TvwABTAWQoRTCMKTHUcAAqaEdXctWqv7l4=; b=IfUSZ9ED5hJTGqT2FcojlqpLOqxwpzhoUyDPtjRPL4GL2RhaaFedInszRvjuyEKedm u8UAEVdoVLjpqfogzyBzjLf/TWa1db8MDfJexrKbd1lQd8JOoE9Fohu1IapTkyihAL2x a90b6OY7Ki55Okf4wcpPWwxe4k367k4DKu0agT00m1X48H2q7V5BMcWFRqXp4prMJIUX Fxmjj1GB0dTUzsCJhoB4+ppbgz4gco7+zH1JhsHqoghjLN7v/Tw12KqdB6b2OHzzTzfe Po5CWKJVGvZnYTQiCSyBBf4o6pH9SggcE83u2SYmEomK+xaXCT1HOpiBJSxrsfjtw2Tj n14A== MIME-Version: 1.0 Received: by 10.224.31.20 with SMTP id w20mr3656250qac.3.1353660514273; Fri, 23 Nov 2012 00:48:34 -0800 (PST) Received: by 10.229.113.102 with HTTP; Fri, 23 Nov 2012 00:48:34 -0800 (PST) In-Reply-To: References: Date: Fri, 23 Nov 2012 09:48:34 +0100 Message-ID: Subject: Re: natd in a jail From: Andreas Nilsson To: Morgan Reed Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: FreeBSD Stable Mailing List , Dewayne Geraghty X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Nov 2012 08:48:35 -0000 On Fri, Nov 23, 2012 at 7:22 AM, Morgan Reed wrote: > On Fri, Nov 23, 2012 at 5:16 PM, Morgan Reed > wrote: > > So it turns out I'd not bought bpf into the jails, however even with > > that and raw_sockets enabled I'm still having no joy with natd. > > > > I've been looking at ipfw a bit today but I've run into an issue, > > loading ipfw_nat causes my kernel to instantly panic, I need to > > recompile with KDB and DDB turned on so I can actually catch the trace > > though... Might look at netgraph before going too far down that path. > > Scratch that, netgtaph isn't in the GENERIC kernel, so I'll have to > rebuild anyway. > > Why not just load the module? Best regards Andreas