From owner-freebsd-questions Mon Jul 13 13:43:33 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA01545 for freebsd-questions-outgoing; Mon, 13 Jul 1998 13:43:33 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from bastuba.partitur.se (bastuba.partitur.se [193.219.246.194]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA01480 for ; Mon, 13 Jul 1998 13:43:17 -0700 (PDT) (envelope-from girgen@partitur.se) Received: from solist. (solist.partitur.se [193.219.246.204]) by bastuba.partitur.se (8.8.8/8.8.8) with SMTP id WAA03186; Mon, 13 Jul 1998 22:43:09 +0200 (CEST) (envelope-from girgen@partitur.se) Received: from partitur.se by solist. (SMI-8.6/SMI-SVR4) id WAA10428; Mon, 13 Jul 1998 22:41:36 +0200 Message-ID: <35AA7100.CA51D722@partitur.se> Date: Mon, 13 Jul 1998 22:41:36 +0200 From: Palle Girgensohn Organization: Partitur X-Mailer: Mozilla 4.05 [en] (X11; I; SunOS 5.6 sun4u) MIME-Version: 1.0 To: charlespeters@chickenbean.com CC: questions@FreeBSD.ORG Subject: Re: Dual Hommed Gateway (ipfw and natd) References: <3.0.3.32.19980713112139.00700204@mail.plstn1.sfba.home.com> Content-Type: multipart/mixed; boundary="------------5AA7884AB8CBC295EE32AFE3" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. --------------5AA7884AB8CBC295EE32AFE3 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Hi, There are some resent changes in the natd man page, that clears a few question marks out. I enclose it as an attachment. view it with "groff -Tascii -man natd.8" Ludwig Pummer wrote: > > At 01:46 PM 7/13/98 -0400, charlespeters@chickenbean.com wrote: > All this stuff I cut out looks alright. > > >I would also like to set up a firewall to protect my network (local) from > >outsiders, but I guess that I should get the router thing working first. I > >have read the man ipfw and man natd, but they are not much help to me. > > don't worry about ipfw just yet. However, the natd manpage does have a > step-by-step. Be sure to scroll down to "RUNNING NATD" > 1. get freebsd 2.2 or higher > 2. build a custom kernel with "options IPFIREWALL" and "options IPDIVERT". > refer to the handbook on how to build a custom kernel > 3. make sure gateway_enable=yes in your rc.conf (yours is) > 4. make soure your interface is already configured (meaning its IP is set) > 5. create an entry in /etc/services "natd 6668/divert # natd et" ^^^^ |||| In newer revisions (2.2-stable), the port number is changed: 6668->8668. You're probably better off using the fresh number; will make it easier to upgrade. The fresh /etc/services has this number already (Also see gnats pr docs/7250). It will work fine with 6668 too though, for now. > 6. run "natd -interface ed0" (for you the interface would be "de1") Hmm, I'd say de0. see the attached man natd: ... -n | -interface interface Use interface to determine the alias address. If there is a possibility that the IP number associated with interface may change, the -dynamic flag should also be used. If this op- tion is not specified, the -a or -alias_address flag must be used. The specified interface must be the public network interface. ... ^^^^^^^^^^^^^^^^^^^^^^^^ The last line was added pretty resently, and it's absence gave me a headache :-) > 7. edit your rc.firewall rule to add "/sbin/ipfw add divert natd all from > any to any via ed0". for you, you would go down to about line 72 and add " > $fwcmd add divert natd all from any to any via de1" Same here, de0. > 8. enable your firewall by setting "firewall_enable=YES" in your rc.conf > (you already have) > > that should be it! if you have trouble, its good to have bpfilter > pseuo-devices built into your kernel (the handbook covers this) so that > you can use tcpdump to see which packets are going where and from whom. > > > > >I am also very new to this, but I am learning. I would appreciate as much > >help as possible, as I have spent the better part of last week on this > >problem, and my deadline is getting near. > > Same here. natd works for me now, so if you still have problems, please feel free to mail me. /Palle --------------5AA7884AB8CBC295EE32AFE3 Content-Type: application/octet-stream; name="natd.8" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="natd.8" LlwiIG1hbnVhbCBwYWdlIFtdIGZvciBuYXRkIDEuNAouRGQgMTUgQXByaWwgMTk5NwouT3Mg RnJlZUJTRAouRHQgTkFURCA4Ci5TaCBOQU1FCi5ObSBuYXRkCi5OZApOZXR3b3JrIEFkZHJl c3MgVHJhbnNsYXRpb24gRGFlbW9uCi5TaCBTWU5PUFNJUwouTm0KLk9wIEZsIGxkc212dQou T3AgRmwgcGVybWFuZW50X2xpbmsKLk9wIEZsIGR5bmFtaWMKLk9wIEZsIGkgQXIgaW5wb3J0 Ci5PcCBGbCBvIEFyIG91dHBvcnQKLk9wIEZsIHAgQXIgcG9ydAouT3AgRmwgYSBBciBhZGRy ZXNzCi5PcCBGbCBuIEFyIGludGVyZmFjZQouT3AgRmwgZiBBciBjb25maWdmaWxlCgouTm0K Lk9wIEZsIGxvZwouT3AgRmwgZGVueV9pbmNvbWluZwouT3AgRmwgdXNlX3NvY2tldHMKLk9w IEZsIHNhbWVfcG9ydHMKLk9wIEZsIHZlcmJvc2UKLk9wIEZsIHVucmVnaXN0ZXJlZF9vbmx5 Ci5PcCBGbCBwZXJtYW5lbnRfbGluawouT3AgRmwgZHluYW1pYwouT3AgRmwgaW5wb3J0IEFy IGlucG9ydAouT3AgRmwgb3V0cG9ydCBBciBvdXRwb3J0Ci5PcCBGbCBwb3J0IEFyIHBvcnQK Lk9wIEZsIGFsaWFzX2FkZHJlc3MgQXIgYWRkcmVzcwouT3AgRmwgaW50ZXJmYWNlIEFyIGlu dGVyZmFjZQouT3AgRmwgY29uZmlnIEFyIGNvbmZpZ2ZpbGUKLk9wIEZsIHJlZGlyZWN0X3Bv cnQgQXIgbGlua3NwZWMKLk9wIEZsIHJlZGlyZWN0X2FkZHJlc3MgQXIgbG9jYWxJUCBwdWJs aWNJUAoKLlNoIERFU0NSSVBUSU9OClRoaXMgcHJvZ3JhbSBwcm92aWRlcyBhIE5ldHdvcmsg QWRkcmVzcyBUcmFuc2xhdGlvbiBmYWNpbGl0eSBmb3IgdXNlCndpdGgKLlhyIGRpdmVydCA0 CnNvY2tldHMgdW5kZXIgRnJlZUJTRC4gIE1vc3Qgb2YgdGhlIGNvbW1hbmQgbGluZSBvcHRp b25zIGFyZSBhdmFpbGFibGUKaW4gYSBzaW5nbGUgY2hhcmFjdGVyIHNob3J0IGZvcm0gb3Ig aW4gYSBsb25nIGZvcm0uICBVc2Ugb2YgdGhlIGxvbmcKZm9ybSBpcyBlbmNvdXJhZ2VkIGFz IGl0IG1ha2VzIHRoaW5ncyBjbGVhcmVyIHRvIHRoZSBjYXN1YWwgb2JzZXJ2ZXIuCgouUHAK Lk5tIE5hdGQKbm9ybWFsbHkgcnVucyBpbiB0aGUgYmFja2dyb3VuZCBhcyBhIGRhZW1vbi4g IEl0IGlzIHBhc3NlZCByYXcgSVAgcGFja2V0cwphcyB0aGV5IHRyYXZlbCBpbnRvIGFuZCBv dXQgb2YgdGhlIG1hY2hpbmUsIGFuZCB3aWxsIHBvc3NpYmx5IGNoYW5nZSB0aGVzZQpiZWZv cmUgcmUtaW5qZWN0aW5nIHRoZW0gYmFjayBpbnRvIHRoZSBJUCBwYWNrZXQgc3RyZWFtLgoK LlBwCi5ObSBOYXRkCmNoYW5nZXMgYWxsIHBhY2tldHMgZGVzdGluZWQgZm9yIGFub3RoZXIg aG9zdCBzbyB0aGF0IHRoZWlyIHNvdXJjZQpJUCBudW1iZXIgaXMgdGhhdCBvZiB0aGUgY3Vy cmVudCBtYWNoaW5lLiAgRm9yIGVhY2ggcGFja2V0IGNoYW5nZWQKaW4gdGhpcyBtYW5uZXIs IGFuIGludGVybmFsIHRhYmxlIGVudHJ5IGlzIGNyZWF0ZWQgdG8gcmVjb3JkIHRoaXMKZmFj dC4gIFRoZSBzb3VyY2UgcG9ydCBudW1iZXIgaXMgYWxzbyBjaGFuZ2VkIHRvIGluZGljYXRl IHRoZQp0YWJsZSBlbnRyeSBhcHBseWluZyB0byB0aGUgcGFja2V0LiAgUGFja2V0cyB0aGF0 IGFyZSByZWNlaXZlZCB3aXRoCmEgdGFyZ2V0IElQIG9mIHRoZSBjdXJyZW50IGhvc3QgYXJl IGNoZWNrZWQgYWdhaW5zdCB0aGlzIGludGVybmFsCnRhYmxlLiAgSWYgYW4gZW50cnkgaXMg Zm91bmQsIGl0IGlzIHVzZWQgdG8gZGV0ZXJtaW5lIHRoZSBjb3JyZWN0CnRhcmdldCBJUCBu dW1iZXIgYW5kIHBvcnQgdG8gcGxhY2UgaW4gdGhlIHBhY2tldC4KCi5QcApUaGUgZm9sbG93 aW5nIGNvbW1hbmQgbGluZSBvcHRpb25zIGFyZSBhdmFpbGFibGUuCi5CbCAtdGFnIC13aWR0 aCBGbAoKLkl0IEZsIGxvZyB8IGwKTG9nIHZhcmlvdXMgYWxpYXNpbmcgc3RhdGlzdGljcyBh bmQgaW5mb3JtYXRpb24gdG8gdGhlIGZpbGUKLlBhIC92YXIvbG9nL2FsaWFzLmxvZyAuClRo aXMgZmlsZSBpcyB0cnVuY2F0ZWQgZWFjaCB0aW1lIG5hdGQgaXMgc3RhcnRlZC4KCi5JdCBG bCBkZW55X2luY29taW5nIHwgZApSZWplY3QgcGFja2V0cyBkZXN0aW5lZCBmb3IgdGhlIGN1 cnJlbnQgSVAgbnVtYmVyIHRoYXQgaGF2ZSBubyBlbnRyeQppbiB0aGUgaW50ZXJuYWwgdHJh bnNsYXRpb24gdGFibGUuCgouSXQgRmwgdXNlX3NvY2tldHMgfCBzCkFsbG9jYXRlIGEKLlhy IHNvY2tldCAyCmluIG9yZGVyIHRvIGVzdGFibGlzaCBhbiBGVFAgZGF0YSBvciBJUkMgREND IHNlbmQgY29ubmVjdGlvbi4gIFRoaXMKb3B0aW9uIHVzZXMgbW9yZSBzeXN0ZW0gcmVzb3Vy Y2VzLCBidXQgZ3VhcmFudGVlcyBzdWNjZXNzZnVsIGNvbm5lY3Rpb25zCndoZW4gcG9ydCBu dW1iZXJzIGNvbmZsaWN0LgoKLkl0IEZsIHNhbWVfcG9ydHMgfCBtClRyeSB0byBrZWVwIHRo ZSBzYW1lIHBvcnQgbnVtYmVyIHdoZW4gYWx0ZXJpbmcgb3V0Z29pbmcgcGFja2V0cy4KV2l0 aCB0aGlzIG9wdGlvbiwgcHJvdG9jb2xzIHN1Y2ggYXMgUlBDIHdpbGwgaGF2ZSBhIGJldHRl ciBjaGFuY2UKb2Ygd29ya2luZy4gIElmIGl0IGlzIG5vdCBwb3NzaWJsZSB0byBtYWludGFp biB0aGUgcG9ydCBudW1iZXIsIGl0CndpbGwgYmUgc2lsZW50bHkgY2hhbmdlZCBhcyBwZXIg bm9ybWFsLgoKLkl0IEZsIHZlcmJvc2UgfCB2CkRvbid0IGNhbGwKLlhyIGZvcmsgMgpvcgou WHIgZGFlbW9uIDMKb24gc3RhcnR1cC4gIEluc3RlYWQsIHN0YXkgYXR0YWNoZWQgdG8gdGhl IGNvbnRyb2xpbmcgdGVybWluYWwgYW5kCmRpc3BsYXkgYWxsIHBhY2tldCBhbHRlcmF0aW9u cyB0byB0aGUgc3RhbmRhcmQgb3V0cHV0LiAgVGhpcyBvcHRpb24Kc2hvdWxkIG9ubHkgYmUg dXNlZCBmb3IgZGVidWdnaW5nIHB1cnBvc2VzLgoKLkl0IEZsIHVucmVnaXN0ZXJlZF9vbmx5 IHwgdQpPbmx5IGFsdGVyIG91dGdvaW5nIHBhY2tldHMgd2l0aCBhbiB1bnJlZ2lzdGVyZWQg c291cmNlIGFkZHJlc3MuCkFjY29yZGluZyB0byByZmMgMTkxOCwgdW5yZWdpc3RlcmVkIHNv dXJjZSBhZGRyZXNzZXMgYXJlIDEwLjAuMC4wLzgsCjE3Mi4xNi4wLjAvMTIgYW5kIDE5Mi4x NjguMC4wLzE2LgoKLkl0IEZsIHJlZGlyZWN0X3BvcnQgQXIgbGlua3NwZWMKUmVkaXJlY3Qg aW5jb21pbmcgY29ubmVjdGlvbnMgYXJyaXZpbmcgdG8gZ2l2ZW4gcG9ydCB0byBhbm90aGVy IGhvc3QgYW5kIHBvcnQuCkxpbmtzcGVjIGlzIG9mIHRoZSBmb3JtCgogIHByb3RvIHRhcmdl dElQOnRhcmdldFBPUlQgW2FsaWFzSVA6XWFsaWFzUE9SVCBbcmVtb3RlSVBbOnJlbW90ZVBP UlRdXQoKd2hlcmUgcHJvdG8gaXMgZWl0aGVyIHRjcCBvciB1ZHAsIHRhcmdldElQIGlzIHRo ZSBkZXNpcmVkIHRhcmdldCBJUApudW1iZXIsIHRhcmdldFBPUlQgaXMgdGhlIGRlc2lyZWQg dGFyZ2V0IFBPUlQgbnVtYmVyLCBhbGlhc1BPUlQKaXMgdGhlIHJlcXVlc3RlZCBQT1JUIG51 bWJlciBhbmQgYWxpYXNJUCBpcyB0aGUgYWxpYXNpbmcgYWRkcmVzcy4KUmVtb3RlSVAgYW5k IHJlbW90ZVBPUlQgY2FuIGJlIHVzZWQgdG8gc3BlY2lmeSB0aGUgY29ubmVjdGlvbgptb3Jl IGFjY3VyYXRlbHkgaWYgbmVjZXNzYXJ5LgpGb3IgZXhhbXBsZSwgdGhlIGFyZ3VtZW50Cgou QXIgdGNwIGluc2lkZTE6dGVsbmV0IDY2NjYKCm1lYW5zIHRoYXQgdGNwIHBhY2tldHMgZGVz dGluZWQgZm9yIHBvcnQgNjY2NiBvbiB0aGlzIG1hY2hpbmUgd2lsbApiZSBzZW50IHRvIHRo ZSB0ZWxuZXQgcG9ydCBvbiB0aGUgaW5zaWRlMSBtYWNoaW5lLgoKLkl0IEZsIHJlZGlyZWN0 X2FkZHJlc3MgQXIgbG9jYWxJUCBwdWJsaWNJUApSZWRpcmVjdCB0cmFmZmljIGZvciBwdWJs aWMgSVAgYWRkcmVzcyB0byBhIG1hY2hpbmUgb24gdGhlIGxvY2FsCm5ldHdvcmsuIFRoaXMg ZnVuY3Rpb24gaXMga25vd24gYXMgInN0YXRpYyBOQVQiLiBOb3JtYWxseSBzdGF0aWMgTkFU CmlzIHVzZWZ1bCBpZiB5b3VyIElTUCBoYXMgYWxsb2NhdGVkIGEgc21hbGwgYmxvY2sgb2Yg SVAgYWRkcmVzc2VzIHRvIHlvdSwKYnV0IGl0IGNhbiBldmVuIGJlIHVzZWQgaW4gdGhlIGNh c2Ugb2Ygc2luZ2xlIGFkZHJlc3M6CgogIHJlZGlyZWN0X2FkZHJlc3MgMTAuMC4wLjggMC4w LjAuMAoKVGhlIGFib3ZlIGNvbW1hbmQgd291bGQgcmVkaXJlY3QgYWxsIGluY29taW5nIHRy YWZmaWMKdG8gbWFjaGluZSAxMC4wLjAuOC4KCklmIHNldmVyYWwgYWRkcmVzcyBhbGlhc2Vz IHNwZWNpZnkgdGhlIHNhbWUgcHVibGljIGFkZHJlc3MKYXMgZm9sbG93cwoKICByZWRpcmVj dF9hZGRyZXNzIDE5Mi4xNjguMC4yIHB1YmxpY19hZGRyCiAgcmVkaXJlY3RfYWRkcmVzcyAx OTIuMTY4LjAuMyBwdWJsaWNfYWRkcgogIHJlZGlyZWN0X2FkZHJlc3MgMTkyLjE2OC4wLjQg cHVibGljX2FkZHIKICAKdGhlIGluY29taW5nIHRyYWZmaWMgd2lsbCBiZSBkaXJlY3RlZCB0 byB0aGUgbGFzdAp0cmFuc2xhdGVkIGxvY2FsIGFkZHJlc3MgKDE5Mi4xNjguMC40KSwgYnV0 IG91dGdvaW5nCnRyYWZmaWMgdG8gdGhlIGZpcnN0IHR3byBhZGRyZXNzZXMgd2lsbCBzdGls bCBiZSBhbGlhc2VkCnRvIHNwZWNpZmllZCBwdWJsaWMgYWRkcmVzcy4KCi5JdCBGbCBwZXJt YW5lbnRfbGluayBBciBsaW5rc3BlYwpDcmVhdGUgYSBwZXJtYW5lbnQgZW50cnkgaW4gdGhl IGludGVybmFsIGFsaWFzIHRhYmxlLiBMaW5rc3BlYyBpcwpvZiB0aGUgZm9ybQoKICBwcm90 byB0YXJnZXRJUDp0YXJnZXRQT1JUIHNvdXJjZUlQOnNvdXJjZVBPUlQgYWxpYXNQT1JUCgp3 aGVyZSBwcm90byBpcyBlaXRoZXIgdGNwIG9yIHVkcCwgdGFyZ2V0SVAgaXMgdGhlIGRlc2ly ZWQgdGFyZ2V0IElQCm51bWJlciwgdGFyZ2V0UE9SVCBpcyB0aGUgZGVzaXJlZCB0YXJnZXQg UE9SVCBudW1iZXIsIHNvdXJjZUlQIGFuZApzb3VyY2VQT1JUIG1hdGNoIHRoZSBpbmNvbWlu ZyBwYWNrZXQsIGFuZCBhbGlhc1BPUlQgaXMgdGhlIHJlcXVlc3RlZApQT1JUIG51bWJlci4g IFZhbHVlcyBvZiB6ZXJvIGFyZSBjb25zaWRlcmVkIGFzIHdpbGRjYXJkcy4gIEZvciBleGFt cGxlLAp0aGUgYXJndW1lbnQKCi5BciB0Y3AgaW5zaWRlMTp0ZWxuZXQgb3V0c2lkZTE6MCA2 NjY2CgptZWFucyB0aGF0IHRjcCBwYWNrZXRzIGRlc3RpbmVkIGZvciBwb3J0IDY2NjYgb24g dGhpcyBtYWNoaW5lIGZyb20gdGhlCm91dHNpZGUxIG1hY2hpbmUgKGFueSBwb3J0KSB3aWxs IGJlIHNlbnQgdG8gdGhlIHRlbG5ldCBwb3J0IG9uIHRoZQppbnNpZGUxIG1hY2hpbmUuCgpO ZXcgaW5zdGFsbGF0aW9ucyBhcmUgZW5jb3VyYWdlZCB0byB1c2UgcmVkaXJlY3RfcG9ydCBp bnN0ZWFkLgoKLkl0IEZsIGR5bmFtaWMKSWYgdGhlCi5GbCBuCm9yCi5GbCBpbnRlcmZhY2UK b3B0aW9uIGlzIHVzZWQsCi5ObQp3aWxsIG1vbml0b3IgdGhlIHJvdXRpbmcgc29ja2V0IGZv ciBhbHRlcmF0aW9ucyB0byB0aGUKLkFyIGludGVyZmFjZQpwYXNzZWQuICBJZiB0aGUgaW50 ZXJmYWNlcyBJUCBudW1iZXIgaXMgY2hhbmdlZCwKLk5tCndpbGwgZHluYW1pY2FsbHkgYWx0 ZXIgaXRzIGNvbmNlcHQgb2YgdGhlIGFsaWFzIGFkZHJlc3MuCgouSXQgRmwgaSB8IGlucG9y dCBBciBpbnBvcnQKUmVhZCBmcm9tIGFuZCB3cml0ZSB0bwouQXIgaW5wb3J0ICwKdHJlYXRp bmcgYWxsIHBhY2tldHMgYXMgcGFja2V0cyBjb21pbmcgaW50byB0aGUgbWFjaGluZS4KCi5J dCBGbCBvIHwgb3V0cG9ydCBBciBvdXRwb3J0ClJlYWQgZnJvbSBhbmQgd3JpdGUgdG8KLkFy IG91dHBvcnQgLAp0cmVhdGluZyBhbGwgcGFja2V0cyBhcyBwYWNrZXRzIGdvaW5nIG91dCBv ZiB0aGUgbWFjaGluZS4KCi5JdCBGbCBwIHwgcG9ydCBBciBwb3J0ClJlYWQgZnJvbSBhbmQg d3JpdGUgdG8KLkFyIHBvcnQgLApkaXN0aW5ndWlzaGluZyBwYWNrZXRzIGFzIGluY29taW5n IG91ciBvdXRnb2luZyB1c2luZyB0aGUgcnVsZXMgc3BlY2lmaWVkIGluCi5YciBkaXZlcnQg NCAuCklmCi5BciBwb3J0CmlzIG5vdCBudW1lcmljLCBpdCBpcyBzZWFyY2hlZCBmb3IgaW4g dGhlCi5QYSAvZXRjL3NlcnZpY2VzCmRhdGFiYXNlIHVzaW5nIHRoZQouWHIgZ2V0c2VydmJ5 bmFtZSAzCmZ1bmN0aW9uLiAgSWYgdGhpcyBmbGFnIGlzIG5vdCBzcGVjaWZpZWQsIHRoZSBk aXZlcnQgcG9ydCBuYW1lZCBuYXRkIHdpbGwKYmUgdXNlZCBhcyBhIGRlZmF1bHQuICBBbiBl eGFtcGxlIGVudHJ5IGluIHRoZQouUGEgL2V0Yy9zZXJ2aWNlcwpkYXRhYmFzZSB3b3VsZCBi ZToKCiAgbmF0ZCAgIDg2NjgvZGl2ZXJ0ICAjIE5ldHdvcmsgQWRkcmVzcyBUcmFuc2xhdGlv biBzb2NrZXQKClJlZmVyIHRvCi5YciBzZXJ2aWNlcyA1CmZvciBmdXJ0aGVyIGRldGFpbHMu CgouSXQgRmwgYSB8IGFsaWFzX2FkZHJlc3MgQXIgYWRkcmVzcwpVc2UKLkFyIGFkZHJlc3MK YXMgdGhlIGFsaWFzIGFkZHJlc3MuICBJZiB0aGlzIG9wdGlvbiBpcyBub3Qgc3BlY2lmaWVk LCB0aGUKLkZsIG4Kb3IKLkZsIGludGVyZmFjZQpvcHRpb24gbXVzdCBiZSB1c2VkLiAgVGhl IHNwZWNpZmllZCBhZGRyZXNzIHNob3VsZCBiZSB0aGUgYWRkcmVzcyBhc3NpZ25lZAp0byB0 aGUgcHVibGljIG5ldHdvcmsgaW50ZXJmYWNlLgouUHAKQWxsIGRhdGEgcGFzc2luZyBvdXQg dGhyb3VnaCB0aGlzIGFkZHJlc3NlcyBpbnRlcmZhY2Ugd2lsbCBiZSByZXdyaXR0ZW4Kd2l0 aCBhIHNvdXJjZSBhZGRyZXNzIGVxdWFsIHRvCi5BciBhZGRyZXNzIC4KQWxsIGRhdGEgYXJy aXZpbmcgYXQgdGhlIGludGVyZmFjZSBmcm9tIG91dHNpZGUgd2lsbCBiZSBjaGVja2VkIHRv CnNlZSBpZiBpdCBtYXRjaGVzIGFueSBhbHJlYWR5LWFsaWFzZWQgb3V0Z29pbmcgY29ubmVj dGlvbi4gIElmIGl0IGRvZXMsCnRoZSBwYWNrZXQgaXMgYWx0ZXJlZCBhY2NvcmRpbmdseS4g IElmIG5vdCwgYWxsCi5GbCByZWRpcmVjdF9wb3J0CmFuZAouRmwgcmVkaXJlY3RfYWRkcmVz cwphc3NpZ25tZW50cyBhcmUgY2hlY2tlZCBhbmQgYWN0aW9uZWQuICBJZiBubyBvdGhlciBh Y3Rpb24gY2FuIGJlIG1hZGUsCmFuZCBpZgouRmwgZGVueV9pbmNvbWluZwppcyBub3Qgc3Bl Y2lmaWVkLCB0aGUgcGFja2V0IGlzIGRlbGl2ZXJlZCB0byB0aGUgbG9jYWwgbWFjaGluZSBh bmQgcG9ydAphcyBzcGVjaWZpZWQgaW4gdGhlIHBhY2tldC4KCi5JdCBGbCBuIHwgaW50ZXJm YWNlIEFyIGludGVyZmFjZQpVc2UKLkFyIGludGVyZmFjZQp0byBkZXRlcm1pbmUgdGhlIGFs aWFzIGFkZHJlc3MuICBJZiB0aGVyZSBpcyBhIHBvc3NpYmlsaXR5IHRoYXQgdGhlCklQIG51 bWJlciBhc3NvY2lhdGVkIHdpdGgKLkFyIGludGVyZmFjZQptYXkgY2hhbmdlLCB0aGUKLkZs IGR5bmFtaWMKZmxhZyBzaG91bGQgYWxzbyBiZSB1c2VkLiAgSWYgdGhpcyBvcHRpb24gaXMg bm90IHNwZWNpZmllZCwgdGhlCi5GbCBhCm9yCi5GbCBhbGlhc19hZGRyZXNzCmZsYWcgbXVz dCBiZSB1c2VkLgouUHAKVGhlIHNwZWNpZmllZAouQXIgaW50ZXJmYWNlCm11c3QgYmUgdGhl IHB1YmxpYyBuZXR3b3JrIGludGVyZmFjZS4KLkl0IEZsIGYgfCBjb25maWcgQXIgY29uZmln ZmlsZQpSZWFkIGNvbmZpZ3VyYXRpb24gZnJvbQouQXIgY29uZmlnZmlsZSAuCi5BciBDb25m aWdmaWxlCmNvbnRhaW5zIGEgbGlzdCBvZiBvcHRpb25zLCBvbmUgcGVyIGxpbmUgaW4gdGhl IHNhbWUgZm9ybSBhcyB0aGUKbG9uZyBmb3JtIG9mIHRoZSBhYm92ZSBjb21tYW5kIGxpbmUg ZmxhZ3MuICBGb3IgZXhhbXBsZSwgdGhlIGxpbmUKCiAgYWxpYXNfYWRkcmVzcyAxNTguMTUy LjE3LjEKCndvdWxkIHNwZWNpZnkgYW4gYWxpYXMgYWRkcmVzcyBvZiAxNTguMTUyLjE3LjEu ICBPcHRpb25zIHRoYXQgZG9uJ3QKdGFrZSBhbiBhcmd1bWVudCBhcmUgc3BlY2lmaWVkIHdp dGggYW4gb3B0aW9uIG9mCi5BciB5ZXMKb3IKLkFyIG5vCmluIHRoZSBjb25maWd1cmF0aW9u IGZpbGUuICBGb3IgZXhhbXBsZSwgdGhlIGxpbmUKCiAgbG9nIHllcwoKaXMgc3lub25vbW91 cyB3aXRoCi5GbCBsb2cgLgpFbXB0eSBsaW5lcyBhbmQgbGluZXMgYmVnaW5uaW5nIHdpdGgg JyMnIGFyZSBpZ25vcmVkLgoKLkVsCgouU2ggUlVOTklORyBOQVREClRoZSBmb2xsb3dpbmcg c3RlcHMgYXJlIG5lY2Vzc2FyeSBiZWZvcmUgYXR0ZW1wdGluZyB0byBydW4KLk5tIG5hdGQg OgoKLkJsIC1lbnVtCi5JdApHZXQgRnJlZUJTRCB2ZXJzaW9uIDIuMiBvciBoaWdoZXIuICBW ZXJzaW9ucyBiZWZvcmUgdGhpcyBkbyBub3Qgc3VwcG9ydAouWHIgZGl2ZXJ0IDQKc29ja2V0 cy4KCi5JdApCdWlsZCBhIGN1c3RvbSBrZXJuZWwgd2l0aCB0aGUgZm9sbG93aW5nIG9wdGlv bnM6CgogIG9wdGlvbnMgSVBGSVJFV0FMTAogIG9wdGlvbnMgSVBESVZFUlQKClJlZmVyIHRv IHRoZSBoYW5kYm9vayBmb3IgZGV0YWlsZWQgaW5zdHJ1Y3Rpb25zIG9uIGJ1aWxkaW5nIGEg Y3VzdG9tCmtlcm5lbC4KCi5JdApFbnN1cmUgdGhhdCB5b3VyIG1hY2hpbmUgaXMgYWN0aW5n IGFzIGEgZ2F0ZXdheS4gIFRoaXMgY2FuIGJlIGRvbmUgYnkKc3BlY2lmeWluZyB0aGUgbGlu ZQoKICBnYXRld2F5X2VuYWJsZT1ZRVMKCmluCi5QYSAvZXRjL3JjLmNvbmYgLApvciB1c2lu ZyB0aGUgY29tbWFuZAoKICBzeXNjdGwgLXcgbmV0LmluZXQuaXAuZm9yd2FyZGluZz0xCgou SXQKSWYgeW91IHdpc2ggdG8gdXNlIHRoZQouRmwgbgpvcgouRmwgaW50ZXJmYWNlCmZsYWdz LCBtYWtlIHN1cmUgdGhhdCB5b3VyIGludGVyZmFjZSBpcyBhbHJlYWR5IGNvbmZpZ3VyZWQu ICBJZiwgZm9yCmV4YW1wbGUsIHlvdSB3aXNoIHRvIHNwZWNpZnkgdHVuMCBhcyB5b3VyCi5B ciBpbnRlcmZhY2UgLAphbmQgeW91J3JlIHVzaW5nCi5YciBwcHAgOApvbiB0aGF0IGludGVy ZmFjZSwgeW91IG11c3QgbWFrZSBzdXJlIHRoYXQgeW91IHN0YXJ0Ci5ObSBwcHAKcHJpb3Ig dG8gc3RhcnRpbmcKLk5tIG5hdGQgLgoKLkl0CkNyZWF0ZSBhbiBlbnRyeSBpbgouUGEgL2V0 Yy9zZXJ2aWNlcyA6CgogIG5hdGQgICAgICAgICAgNjY2OC9kaXZlcnQgICMgTmV0d29yayBB ZGRyZXNzIFRyYW5zbGF0aW9uIHNvY2tldAoKVGhpcyBnaXZlcyBhIGRlZmF1bHQgZm9yIHRo ZQouRmwgcApvcgouRmwgcG9ydApmbGFnLgoKLkVsCi5QcApSdW5uaW5nCi5ObQppcyBmYWly bHkgc3RyYWlnaHQgZm9yd2FyZC4gIFRoZSBsaW5lCgogIG5hdGQgLWludGVyZmFjZSBlZDAK CnNob3VsZCBzdWZmaWNlIGluIG1vc3QgY2FzZXMgKHN1YnN0aXR1dGluZyB0aGUgY29ycmVj dCBpbnRlcmZhY2UgbmFtZSkuICBPbmNlCi5ObQppcyBydW5uaW5nLCB5b3UgbXVzdCBlbnN1 cmUgdGhhdCB0cmFmZmljIGlzIGRpdmVydGVkIHRvIG5hdGQ6CgouQmwgLWVudW0KLkl0Cllv dSB3aWxsIG5lZWQgdG8gYWRqdXN0IHRoZQouUGEgL2V0Yy9yYy5maXJld2FsbApzY3JpcHQg dG8gdGFzdGUuICBJZiB5b3UncmUgbm90IGludGVyZXN0ZWQgaW4gaGF2aW5nIGEgZmlyZXdh bGwsIHRoZQpmb2xsb3dpbmcgbGluZXMgd2lsbCBkbzoKCiAgL3NiaW4vaXBmdyAtZiBmbHVz aAogIC9zYmluL2lwZncgYWRkIGRpdmVydCBuYXRkIGFsbCBmcm9tIGFueSB0byBhbnkgdmlh IGVkMAogIC9zYmluL2lwZncgYWRkIHBhc3MgYWxsIGZyb20gYW55IHRvIGFueQoKVGhlIHNl Y29uZCBsaW5lIGRlcGVuZHMgb24geW91ciBpbnRlcmZhY2UgKGNoYW5nZSBlZDAgYXMgYXBw cm9wcmlhdGUpCmFuZCBhc3N1bWVzIHRoYXQgeW91J3ZlIHVwZGF0ZWQKLlBhIC9ldGMvc2Vy dmljZXMKd2l0aCB0aGUgbmF0ZCBlbnRyeSBhcyBhYm92ZS4gIElmIHlvdSBzcGVjaWZ5IHJl YWwgZmlyZXdhbGwgcnVsZXMsIGl0J3MKYmVzdCB0byBzcGVjaWZ5IGxpbmUgMiBhdCB0aGUg c3RhcnQgb2YgdGhlIHNjcmlwdCBzbyB0aGF0Ci5ObQpzZWVzIGFsbCBwYWNrZXRzIGJlZm9y ZSB0aGV5IGFyZSBkcm9wcGVkIGJ5IHRoZSBmaXJld2FsbC4gIFRoZSBmaXJld2FsbApydWxl cyB3aWxsIGJlIHJ1biBhZ2FpbiBvbiBlYWNoIHBhY2tldCBhZnRlciB0cmFuc2xhdGlvbiBi eQouTm0gbmF0ZCAsCm1pbnVzIGFueSBkaXZlcnQgcnVsZXMuCgouSXQKRW5hYmxlIHlvdXIg ZmlyZXdhbGwgYnkgc2V0dGluZwoKICBmaXJld2FsbF9lbmFibGU9WUVTCgppbgouUGEgL2V0 Yy9yYy5jb25mIC4KVGhpcyB0ZWxscyB0aGUgc3lzdGVtIHN0YXJ0dXAgc2NyaXB0cyB0byBy dW4gdGhlCi5QYSAvZXRjL3JjLmZpcmV3YWxsCnNjcmlwdC4gIElmIHlvdSBkb24ndCB3aXNo IHRvIHJlYm9vdCBub3csIGp1c3QgcnVuIHRoaXMgYnkgaGFuZCBmcm9tIHRoZQpjb25zb2xl LiAgTkVWRVIgcnVuIHRoaXMgZnJvbSBhIHZpcnR1YWwgc2Vzc2lvbiB1bmxlc3MgeW91IHB1 dCBpdCBpbnRvCnRoZSBiYWNrZ3JvdW5kLiAgSWYgeW91IGRvLCB5b3UnbGwgbG9jayB5b3Vy c2VsZiBvdXQgYWZ0ZXIgdGhlIGZsdXNoCnRha2VzIHBsYWNlLCBhbmQgZXhlY3V0aW9uIG9m Ci5QYSAvZXRjL3JjLmZpcmV3YWxsCndpbGwgc3RvcCBhdCB0aGlzIHBvaW50IC0gYmxvY2tp bmcgYWxsIGFjY2Vzc2VzIHBlcm1hbmVudGx5LiAgUnVubmluZwp0aGUgc2NyaXB0IGluIHRo ZSBiYWNrZ3JvdW5kIHNob3VsZCBiZSBlbm91Z2ggdG8gcHJldmVudCB0aGlzIGRpc2FzdGVy LgoKLkVsCgouU2ggU0VFIEFMU08KLlhyIGdldHNlcnZieW5hbWUgMiAsCi5YciBzb2NrZXQg MiAsCi5YciBkaXZlcnQgNCAsCi5YciBzZXJ2aWNlcyA1ICwKLlhyIGlwZncgOAoKLlNoIEFV VEhPUlMKVGhpcyBwcm9ncmFtIGlzIHRoZSByZXN1bHQgb2YgdGhlIGVmZm9ydHMgb2YgbWFu eSBwZW9wbGUgYXQgZGlmZmVyZW50CnRpbWVzOgoKICBEaXZlcnQgc29ja2V0czogICAgICAg ICAgICAgICBBcmNoaWUgQ29iYnMgPGFyY2hpZUB3aGlzdGxlLmNvbT4KICBQYWNrZXQgYWxp YXNpbmc6ICAgICAgICAgICAgICBDaGFybGVzIE1vdHQgPGNtb3R0QHNydi5uZXQ+CiAgSVJD IHN1cHBvcnQgJiBtaXNjIGFkZGl0aW9uczogRWl2aW5kIEVrbHVuZCA8cGVyaGFwc0B5ZXMu bm8+CiAgTmF0ZDogICAgICAgICAgICAgICAgICAgICAgICAgQXJpIFN1dXRhcmkgPHN1dXRh cmlAaWtpLmZpPgogIEdsdWU6ICAgICAgICAgICAgICAgICAgICAgICAgIEJyaWFuIFNvbWVy cyA8YnJpYW5AYXdmdWxoYWsub3JnPgo= --------------5AA7884AB8CBC295EE32AFE3-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message