From owner-freebsd-questions@FreeBSD.ORG Fri Aug 19 04:24:02 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5A58316A41F for ; Fri, 19 Aug 2005 04:24:02 +0000 (GMT) (envelope-from forrie@forrie.com) Received: from forrie.com (forrie.hsd1.ma.comcast.net [24.147.45.106]) by mx1.FreeBSD.org (Postfix) with ESMTP id DC0AA43D48 for ; Fri, 19 Aug 2005 04:24:01 +0000 (GMT) (envelope-from forrie@forrie.com) Received: from [192.168.1.99] (i-99.forrie.net. [192.168.1.99]) (authenticated bits=0) by forrie.com with ESMTP id j7J4NxD3009135; Fri, 19 Aug 2005 00:24:00 -0400 (EDT) (envelope-from forrie@forrie.com) Message-ID: <43055EE0.2000909@forrie.com> Date: Fri, 19 Aug 2005 00:24:00 -0400 From: Forrest Aldrich User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050814) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Mike Tancsa References: <430515D3.1050302@forrie.com> In-Reply-To: X-RAVMilter-Version: 8.3.0(snapshot 20010925) (forrie.hsd1.ma.comcast.net) Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org Subject: Re: Getting ipfw2 on FreeBSD-4.11-STABLE... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Aug 2005 04:24:02 -0000 Thanks this worked well. One further question, the manpage doesn't really elaborate much on the use of tables. Particularly, how to utilize them in deny rules. Anyone have better examples, or did I miss something. Thanks. Mike Tancsa wrote: >On Thu, 18 Aug 2005 19:12:19 -0400, in sentex.lists.freebsd.questions >you wrote: > > > >>I have FreeBSD-4.11-STABLE on one of my systems. I did a >>buildworld/installworld today - but I still have ipfw and not ipfw2 - >>even though the manpage says otherwise. >> >> > >Add >IPFW2=TRUE >in /etc/make.conf >and >options IPFW2 #firewall >in the kernel > >I *think* >/usr/src/sbin/ipfw >make clean;make depend;make;make install >should work, and then a >make buildkernel >should do the trick > > ---Mike >-------------------------------------------------------- >Mike Tancsa, Sentex communications http://www.sentex.net >Providing Internet Access since 1994 >mike@sentex.net, (http://www.tancsa.com) > >