From owner-freebsd-questions Thu Jan 25 8:20:33 2001 Delivered-To: freebsd-questions@freebsd.org Received: from apollo.ocsny.com (apollo.ocsny.com [204.107.76.2]) by hub.freebsd.org (Postfix) with ESMTP id F259E37B6A7 for ; Thu, 25 Jan 2001 08:20:15 -0800 (PST) Received: from ocsinternet.com (ra.upan.org [204.107.76.19]) by apollo.ocsny.com (8.9.2/8.9.3) with ESMTP id LAA27645; Thu, 25 Jan 2001 11:19:51 -0500 (EST) Message-ID: <3A700BEC.FA5DCFC@ocsinternet.com> Date: Thu, 25 Jan 2001 11:20:12 +0000 From: Mikel King Organization: OCS Internet X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.2-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: "Andrew J. Siegel" Cc: "'Jonathan Chen'" , "Freebsd-Questions (E-mail)" Subject: Re: ipfw/nat References: <007401c0868a$41870370$768a0218@htfdw1.ct.home.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG recommend not to use the IPFORWARD option thus; RULE-BASED FORWARDING DISABLED as I have had problems with NATD and this option running on 4.2... Cheers, Mikel "Andrew J. Siegel" wrote: > IPDIVERT enabled, RULE-BASED FORWARDING ENABLED > > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jonathan Chen > Sent: Tuesday, January 23, 2001 4:07 PM > To: Andrew J. Siegel > Cc: freebsd-questions@FreeBSD.ORG > Subject: Re: ipfw/nat > > On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote: > > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL > options > > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2) > > config'd and compile....did sysctl -a | grep fw...and fw.enable is set to > > 1....ipfw show issues one allow all for static commands, and something > > unknown for dynamic commands.. > > > > try adding ipfw add 500 divert natd all from any to any via rl0 > > > > and receive error: > > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT > > This usually indicates that you haven't *installed* a kernel with > IPDIVERT options set. Send the list of your dmesg output. > -- > Jonathan Chen | To do is to be -- Nietzsche > | To be is to do -- Sartre > | Scooby do be do -- Scooby > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message