Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Apr 2012 08:12:08 -0400
From:      Robert Huff <roberthuff@rcn.com>
To:        KES <kes-kes@yandex.ua>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   ipfw FreeBSD 10 
Message-ID:  <20357.29976.294862.301653@jerusalem.litteratus.org>
In-Reply-To: <434851334138446@web55.yandex.ru>
References:  <434851334138446@web55.yandex.ru>

next in thread | previous in thread | raw e-mail | index | archive | help

KES writes:

>  building kernel with this options:
>  options         IPFIREWALL              #enable ipfw
>  options         IPFIREWALL_VERBOSE      #enable log
>  options         IPFIREWALL_FORWARD      #enable fwd
>  options         IPDIVERT
>  options         LIBALIAS
>  options         IPFIREWALL_NAT          #enable nat
>  
>  do not enable IPFW
>  
>  When doing 
>  ipfw show
>  it shows
>  0000000  93874234  23402394820384 any to any
>  and stops

	I have IPFW working, eith:

options  IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options  IPFIREWALL_FORWARD
options  IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity

	in the kernel config file, and :

ipfw_load="YES"
ipfw_nat_load="YES"	# in-kernel ipfw nat
libalias_load="YES"	# for in-kernel ipfw nat

	in /boot/loader.conf.
	(Note: the available documentation for basic IPFW is good.
However, if you want to do NAT, the information - in the IPFW man
page and the Handbook - extremely confusing.  It took me a week
and some expert help to get this working.)

	Respectfully,


			Robert Huff





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20357.29976.294862.301653>