From owner-freebsd-current Mon Dec 27 14: 3:42 1999 Delivered-To: freebsd-current@freebsd.org Received: from uni4nn.gn.iaf.nl (osmium.gn.iaf.nl [193.67.144.12]) by hub.freebsd.org (Postfix) with ESMTP id C3B26152E1 for ; Mon, 27 Dec 1999 14:03:20 -0800 (PST) (envelope-from wilko@yedi.iaf.nl) Received: from yedi.iaf.nl (uucp@localhost) by uni4nn.gn.iaf.nl (8.9.2/8.9.2) with UUCP id WAA29831; Mon, 27 Dec 1999 22:59:57 +0100 (MET) Received: (from wilko@localhost) by yedi.iaf.nl (8.9.3/8.9.3) id WAA03394; Mon, 27 Dec 1999 22:02:29 +0100 (CET) (envelope-from wilko) Date: Mon, 27 Dec 1999 22:02:29 +0100 From: Wilko Bulte To: Emre Cc: freebsd-current@FreeBSD.ORG Subject: Re: IPFW Message-ID: <19991227220229.A3327@yedi.iaf.nl> References: <19991227145203.A29810@iris.vsrc.uab.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <19991227145203.A29810@iris.vsrc.uab.edu>; from emre@iris.vsrc.uab.edu on Mon, Dec 27, 1999 at 02:52:03PM +0000 X-OS: FreeBSD yedi.iaf.nl 3.4-STABLE FreeBSD 3.4-STABLE X-PGP: finger wilko@freebsd.org Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Dec 27, 1999 at 02:52:03PM +0000, Emre wrote: > I apologize if this question is not appropriate for this list but... It is not I'm afraid. > I'm trying to firewall it using ipfw, when I issue the command > > ipfw add deny udp from any to any 1-2200 > > I get > > 00000 deny udp from any to any 1-2200 > ipfw: setsockopt(IP_FW_ADD): Protocol not available > > I only changed two lines in the GENERIC kernel. Did I screw it up? > I assumed packet filtering was enabled in the GENERIC kernel by default. Wrong assumption. See /sys/i386/conf/LINT for the entries you need to enable the firewall code. > Can anyone give me hints on how to fix this, or what this message means? > I already RTFM and the stuff in the handbook (the man page looks very similar > to the stuff that was in the handbook). Is there any reason for you to run -current? Because if there isn't you'd be better off using a -stable version of FreeBSD. -- Wilko Bulte Arnhem, The Netherlands - The FreeBSD Project WWW : http://www.tcja.nl http://www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message