Date: Wed, 31 Jan 2001 23:04:43 -0500 From: "Dan Harp" <danh@eagle.ca> To: "Tim DeBoer" <deboert@cornhusker.net> Cc: <freebsd-questions@freebsd.org> Subject: RE: Newbie fun with natd/ipfw Message-ID: <NDBBJJNIIACACBOGMNIOMECLENAA.danh@eagle.ca> In-Reply-To: <4.3.2.7.2.20010131212130.00a8a6c0@mail.cornhusker.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Yah, me too (newbie and setting up NAT)! I have been messing around with it via the instructions from: http://www.mostgraveconcern.com/freebsd/ipfw.html Index @ http://www.mostgraveconcern.com/freebsd/ Looks promising, but I'm not able to figure out what exactly to substitute what he has in his rc.ipfw file, compared to my IP's and such. All I want to do at this point (since I couldn't get the firewall working) is to setup NAT so that this server can feed all my win98/2000 workstations full Internet access. Does anyone have the some instructions on how to just setup NAT? FreeBSD 4.1.1 here. Regards, --Dan > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Tim DeBoer > Sent: January 31, 2001 10:44 PM > To: questions@FreeBSD.ORG > Subject: Newbie fun with natd/ipfw > > > Hi Everyone, > I'm trying to get natd/ipfw to work properly. > I did a custom kernel with the following options (Yes, it's using the new > kernel) > options IPFIREWALL # ipfw-firewall support > options IPFIREWALL_VERBOSE # optional > options IPFIREWALL_FORWARD # optional > options IPFIREWALL_VERBOSE_LIMIT=100 # limit verbosity > options IPDIVERT # divert sockets (for natd) > > When I try to block all telnet traffic to this interface, I get... > # ipfw add deny tcp from any to 192.168.0.1 23 > ipfw: getsockopt(IP_FW_ADD): Protocol not available > > IP_FW_ADD???? > I haven't seen that option anywhere in the docs, or am I not reading this > correctly? > > Anyway, if I follow some advice from the archives; previous questions > related to this... > # kldload ipfw > kldload: can't load ipfw: Operation not permitted > > If I try to see my current rule set (none, I know) > # ipfw show > ipfw: getsockopt(IP_FW_GET): Protocol not available > Again, I haven't seen that option anywhere in the docs, am I still not > reading this correctly? > > Can anyone point me in the right direction here? > > Thanks! > > Tim DeBoer > http://www.snarfy.com > > It is by caffeine alone I set my mind in motion. > It is by the beans of Java that thoughts acquire speed, the hands acquire > shaking, > the shaking becomes a warning. > It is by caffeine alone I set my mind in motion. > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NDBBJJNIIACACBOGMNIOMECLENAA.danh>