Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jan 2001 19:03:00 -0500
From:      "Stephen Brandi" <brandi@melomel.com>
To:        "Jonathan Chen" <jonathan.chen@itouch.co.nz>, "Stephen Brandi" <melomel@vuae.pair.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Network fails with IPDIVERT IPFIREWALL enabled.
Message-ID:  <000a01c08b19$2cca1ba0$0200a8c0@stinky.org>
References:  <Pine.BSF.4.10.10101261036180.18331-100000@vuae.pair.com> <20010130085704.D91522@itouchnz.itouch>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks, I did that. It still wasn't working.

I finally got it fixed. Setting IPFIREWALL_DEFAULT_TO_ACCEPT did it. I'm not
sure why.

>Subject: Re: Network fails with IPDIVERT IPFIREWALL enabled.


> On Fri, Jan 26, 2001 at 10:48:43AM -0500, Stephen Brandi wrote:
> >
> > I have been having a problem that has been baffling me. I have a freebsd
> > 4.1 machine running natd and a totally open firewall (temporarily). When
I
> > boot with kernel.GENERIC networking (local net and cable modem to
> > internet) work fine, but no routing happens (as expected). When I boot
> > with my custom kernel with options IPDIVERT and IPFIREWALL enabled, I am
> > unable to use either network interface. I can't even ping localhost.
> > I ran a diff on GENERIC and MYKERNEL and these were the only
differences.
> >
> > Gateway, natd, and firewall are enabled in rc.conf
>
> When you install a IPFIREWALL'd kernel, you have to make sure that
> either your firewall rules are set up, or that you have in
> /etc/rc.conf:
>
> firewall_enable="YES"
> firewall_type="OPEN"
>
> --
> Jonathan Chen <jonathan.chen@itouch.co.nz>
> ----------------------------------------------------------------------
> The human mind ordinarily operates at only ten percent of its capacity
>                      -- the rest is overhead for the operating system.
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000a01c08b19$2cca1ba0$0200a8c0>