From owner-freebsd-questions@FreeBSD.ORG  Wed Jun  2 20:55:36 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 037CC16A4CE
	for <freebsd-questions@FreeBSD.org>;
	Wed,  2 Jun 2004 20:55:36 -0700 (PDT)
Received: from mx.diamondarm.ru (diamondarm.ru [81.17.14.102])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9B96C43D54
	for <freebsd-questions@FreeBSD.org>;
	Wed,  2 Jun 2004 20:55:34 -0700 (PDT)
	(envelope-from S.V.Salsky@diamondarm.ru)
Received: from mx.diamondarm.ru (localhost [127.0.0.1])
	by mx.diamondarm.ru (8.12.10/8.12.10) with ESMTP id i533tb0F000633
	for <freebsd-questions@FreeBSD.org.KAV>;
	Thu, 3 Jun 2004 09:55:38 +0600 (YEKST)
	(envelope-from S.V.Salsky@diamondarm.ru)
Received: (from root@localhost)
	by mx.diamondarm.ru (8.12.10/8.12.10/Submit) id i533tbpI000632
	for freebsd-questions@FreeBSD.org.KAV;
	Thu, 3 Jun 2004 09:55:37 +0600 (YEKST)
	(envelope-from S.V.Salsky@diamondarm.ru)
Received: from svs57 ([192.168.0.91])
	by mx.diamondarm.ru (8.12.10/8.12.10) with SMTP id i533tZ0F000620
	for <freebsd-questions@FreeBSD.org>;
	Thu, 3 Jun 2004 09:55:36 +0600 (YEKST)
	(envelope-from S.V.Salsky@diamondarm.ru)
Message-ID: <001001c4491e$9bfef380$5b00a8c0@brilliant.local>
From: =?koi8-r?B?8y73LvPBzNjTy8nK?= <S.V.Salsky@diamondarm.ru>
To: <freebsd-questions@FreeBSD.org>
Date: Thu, 3 Jun 2004 09:55:27 +0600
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: ipfw: getsockopt(IP_FW_ADD): Operation not permitted
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Jun 2004 03:55:36 -0000

Hello!

Installed FreeBSD 5.2.
Having problem with ipfw.

kernel config:

options         DUMMYNET
options         IPFIREWALL   =20
options         IPFIREWALL_VERBOSE=20
options         IPFIREWALL_VERBOSE_LIMIT=3D100
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPDIVERT=20
options         IPFILTER

in /etc/defaults/rc.conf:

firewall_enable=3D"YES"
firewall_script=3D"/etc/rc.firewall"
firewall_type=3D"open"
firewall_quiet=3D"NO"=20
firewall_logging=3D"NO"
firewall_flags=3D""

Problem is:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
~# ipfw add 100 deny tcp from any to any 135-139
ipfw: getsockopt(IP_FW_ADD): Operation not permitted
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

With best regards,
Serge V. Salsky.