Date: Thu, 22 Feb 2001 01:20:37 -0800 From: "Crist J. Clark" <cjclark@reflexnet.net> To: Kathy Quinlan <katinka@magestower.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Natd errors Message-ID: <20010222012037.F89396@rfx-216-196-73-168.users.reflex> In-Reply-To: <001001c09c82$9980a3c0$fe00a8c0@kat.lan>; from katinka@magestower.com on Thu, Feb 22, 2001 at 11:50:27AM %2B0800 References: <00f901c09c73$7e036e20$fe00a8c0@kat.lan> <007001c09c81$9de33000$0d01a8c0@casystems.net> <001001c09c82$9980a3c0$fe00a8c0@kat.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 22, 2001 at 11:50:27AM +0800, Kathy Quinlan wrote:
> I have the following option in my kernel :
>
> options IPFIREWALL_VERBOSE
>
> but I still do not see which rule is causing it
>
> any ideas ?
You did put the 'log' key word in the suspect 'deny' rules?
> or is their a log file somewhere that logs these errors ?
> or can I redirect these errors to a file, as all I get in /va/log/messages
> and on the console is the natd104 error and not a rule # responsible.
The log information generated by ipfw is sent to syslog as
security.info.
> also is their a list of error messages anywhere ?
You can often find out what an error message for a specific program
means on it manpage or other documentation. Frankly, there are wa-ay
too many to put all errors that any program could produce in one
place.
> like if I get an error how do I find what it is as like the natd104 was not
> very helpful.
Here was the log entry you gave (format recovered),
> > > Feb 22 10:00:05 serverbsd natd[104]: failed to write packet back (Permission denied)
\_____________/ \_______/ \__/ \_/ \_____...
date and time host | | message
program |
PID
'natd' is the program that sent the message and '104' its process ID
number.
--
Crist J. Clark cjclark@alum.mit.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010222012037.F89396>
