From owner-freebsd-current@FreeBSD.ORG  Tue Aug 31 10:28:55 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D70C916A4CE
	for <current@freebsd.org>; Tue, 31 Aug 2004 10:28:55 +0000 (GMT)
Received: from obh.snafu.de (obh.snafu.de [213.73.92.34])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3B97B43D3F
	for <current@freebsd.org>; Tue, 31 Aug 2004 10:28:55 +0000 (GMT)
	(envelope-from ob@gruft.de)
Received: from ob by obh.snafu.de with local (Exim 4.34 (FreeBSD))
	id 1C25sg-000Hit-8o; Tue, 31 Aug 2004 12:28:50 +0200
Date: Tue, 31 Aug 2004 12:28:50 +0200
From: Oliver Brandmueller <ob@e-Gitt.NET>
To: Sean McNeil <sean@mcneil.com>
Message-ID: <20040831102849.GD52217@e-Gitt.NET>
References: <1093919355.39775.2.camel@server.mcneil.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1093919355.39775.2.camel@server.mcneil.com>
User-Agent: Mutt/1.5.6i
Sender: Oliver Brandmueller <ob@gruft.de>
cc: current@freebsd.org
Subject: Re: RELENG_5 ipfw problem
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Aug 2004 10:28:56 -0000

Hi.

On Mon, Aug 30, 2004 at 07:29:15PM -0700, Sean McNeil wrote:
> How are you compiling ipfw2?  I have it built into my kernel and have no
> issues at all.  Are you using it as a loadable module or part of the
> kernel?

Meanwhile (as I wrote in the thread) I have IPFW compiled in by using 
options IPFIREWALL and options IPFIREWALL_FORWARD - which is now 
mandatory to have forwarding support.

When you say "no issues at all", do you also use forwarding to change 
the next hop of IP packets? This seems to be the only problem and is a 
very special setup.

Greetings, Oliver

-- 
| Oliver Brandmueller | Offenbacher Str. 1  | Germany       D-14197 Berlin |
| Fon +49-172-3130856 | Fax +49-172-3145027 | WWW:   http://the.addict.de/ |
|               Ich bin das Internet. Sowahr ich Gott helfe.               |
| Eine gewerbliche Nutzung aller enthaltenen Adressen ist nicht gestattet! |