From owner-freebsd-questions@FreeBSD.ORG Thu Apr 5 14:17:56 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id AE8BF16A405 for ; Thu, 5 Apr 2007 14:17:56 +0000 (UTC) (envelope-from jonathan@hst.org.za) Received: from sirian.hst.org.za (sirian.hst.org.za [209.203.2.130]) by mx1.freebsd.org (Postfix) with ESMTP id 979B113C44C for ; Thu, 5 Apr 2007 14:17:54 +0000 (UTC) (envelope-from jonathan@hst.org.za) Received: from localhost (localhost.hst.org.za [127.0.0.1]) by sirian.hst.org.za (Postfix) with ESMTP id BA5C231DA81 for ; Thu, 5 Apr 2007 16:16:22 +0200 (SAST) Received: from sirian.hst.org.za ([127.0.0.1]) by localhost (sirian.hst.org.za [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 74006-06 for ; Thu, 5 Apr 2007 16:16:22 +0200 (SAST) Received: from sysadmin.hst.org.za (sysadmin.int.dbn.hst.org.za [10.1.1.20]) by sirian.hst.org.za (Postfix) with ESMTP id 58C9C31D964 for ; Thu, 5 Apr 2007 16:16:22 +0200 (SAST) From: Jonathan McKeown Organization: Health Systems Trust To: freebsd-questions@freebsd.org Date: Thu, 5 Apr 2007 16:20:22 +0200 User-Agent: KMail/1.7.2 References: <20070403105841.A98763@badger.tltodd.com> <20070405084208.A4130@badger.tltodd.com> <200704051601.01747.jonathan@hst.org.za> In-Reply-To: <200704051601.01747.jonathan@hst.org.za> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200704051620.22407.jonathan@hst.org.za> X-Virus-Scanned: by amavisd-new at hst.org.za Subject: Re: ipfw fwd not working in 6.2-release X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Apr 2007 14:17:56 -0000 On Thursday 05 April 2007 16:01, Jonathan McKeown wrote: > > On Thursday 05 April 2007 15:42, Terry Todd wrote: [ipfw not accepting fwd rules when kernel built with options IPFIREWALL_FORWARD and I agreed, saying] > Has the way ipfw.ko is built changed? Do we need to compile ipfw into the > kernel to use ipfw fwd rules now? Or can I force ipfw.ko to be rebuilt with > forwarding included? I'm on my way home now, but a quick look at the source suggests that unless ipfw.ko is built with this option set, rule-based forwarding is disabled - and indeed this message appears in my boot messages. Presumably the option is not fed to the module during a buildkernel. I'm going to try building just that module with the option set. Jonathan