Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Aug 2001 12:18:22 +0200 (CEST)
From:      Salvo Bartolotta <bartequi@neomedia.it>
To:        Jeremy <slicetech@earthlink.net>
Cc:        questions@freebsd.org
Subject:   Re: Getting IPFW to work
Message-ID:  <998216302.3b7f926e40290@webmail.neomedia.it>

next in thread | raw e-mail | index | archive | help
> Dear Sir or Madam,

> I am trying to get NATD/IPFW to run correctly and am having some trouble,
> when trying to pass a rule, any rule, to IPFW I get "IPFW:
> getsockopt(IP_FW_ADD): protocol not available".  My system configuration is
> as follows:

> Pentium 166mmx w/ 32MB RAM, FreeBSD4.2RELEASE running a GENERIC kernel with
> options IPFIREWALL, IPFIREWALL_FORWARD, and IPDIVERT compiled in.




<since nobody has answered, I'll make an attempt>

The protocol is NOT available while you have ACTUALLY compiled in the options. 
BTW, my kernel has almost the same options as yours, and it DOES work on my 
4.4-PRERELEASE system. Right now.

Incidentally, ipfw can also be loaded as a module, not sure whether 
FreeBSD-4.2 can do that. From what you have just said, I am afraid not. 






> So far I have tried:
> cvsupped and build world,
> recompiled kernel multiple times with new config files,
> format/reinstall

> An example IPFW rule hat generates this error (all do) is "/sbin/ipfw add
> pass all from any to any"




What you have described above SHOULD normally work. For instance, you built 
your world and kernel, you installed them, and you ran mergemaster(8), right?

<guess type="wild">

AFAICS, the malfunction you have run into seems to indicate that ipfw is 
**NOT** compiled in your kernel whereas this is REQUIRED in your incantation 
of FreeBSD (currently 4.2 after reinstallation ?) Surely you followed the 
correct procedures when compiling your kernel and/or upgrading?

</guess>

Those procedures are extensively covered in the handbook, which you can also 
find on-line on the main FreeBSD site (http://www.freebsd.org/handbook,  
chapters 9 and 20).

If you still have problems, you might want to post more details about the 
failing procedure  -- please make one attempt at a time. Log on paper what you 
are doing, in a step-by-step fashion, then post what you have recorded.

Good luck,
Salvo

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?998216302.3b7f926e40290>