Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 22 Oct 2000 21:52:03 +0200
From:      "Leif Neland" <leifn@neland.dk>
To:        <freebsd-current@FreeBSD.ORG>
Subject:   divert as module?
Message-ID:  <009701c03c61$c305b7c0$0e00a8c0@neland.dk>

next in thread | raw e-mail | index | archive | help
I want to install ipfw and natd to a machine working as isdn-router, which I
lost the kernel config for
I connect to the world via userland-ppp and isdnd.

I don't have any ipfw or divert compiled in the kernel, but I can load
ipfw.ko, so the firewall rules can work (I now see my isp sends IGMP's to
me...)

I can also start /sbin/natd -n ed0

But the command
"ipfw add divert natd all from any to any via tun0 "
fails:
00000 divert 8668 ip from any to any via tun0
ipfw: setsockopt(IP_FW_ADD): Invalid argument

And I can't get from any hosts inside the router to the world.

Can I enable divert via a module, or do I have to reconstruct the kernel
config and recompile?

Or can I use ppp's nat together with ipfw?

I have used the http://www.freebsd.org/tutorials/dialup-firewall/index.html
by Marc Silver as the basis for my setup.

# kldstat
Id Refs Address    Size     Name
 1    5 0xc0100000 250bf8   kernel
 2    1 0xc0a88000 6000     ipfw.ko
 3    1 0xc0ad6000 3000     daemon_saver.ko
 4    1 0xc0adb000 11000    linux.ko

Leif





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?009701c03c61$c305b7c0$0e00a8c0>