Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 May 2003 22:20:30 -0700 (PDT)
From:      "Jason Dambrosio" <jason@wiz.cx>
To:        freebsd-ipfw@freebsd.org
Subject:   ipfw2 broken in -current?
Message-ID:  <4156.24.165.50.248.1053753630.squirrel@webmail.tekgenesis.net>

next in thread | raw e-mail | index | archive | help
# ipfw show
65535       2875    1377389 deny ip from any to any
# ping lava.net
PING lava.net (64.65.64.17): 56 data bytes
64 bytes from 64.65.64.17: icmp_seq=0 ttl=242 time=58.529 ms
# ipfw add 100 divert natd ip from any to any via bge0
ipfw: getsockopt(IP_FW_ADD): Invalid argument
ipfw: opcode 50 size 1 wrong
# uname -a
FreeBSD test-server 5.1-BETA FreeBSD 5.1-BETA #12: Fri May 23 18:11:41 HST 2003

I have:

options IPDIVERT
options IPSTEALTH
options IPFIREWALL
options IPFIREWALL_FORWARD
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=0
options IPFIREWALL_DEFAULT_TO_ACCEPT

and

sysctl net.inet.ip.forwarding=1
sysctl net.inet.ip.fastforwarding=1
sysctl net.inet.ip.stealth=1

Jason



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4156.24.165.50.248.1053753630.squirrel>