Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Feb 2004 19:21:47 -0500
From:      Craig Rodrigues <rodrigc@crodrigues.org>
To:        Vincent Poy <vince@oahu.WURLDLINK.NET>
Cc:        Kris Kennaway <kris@obsecurity.org>
Subject:   Re: HEADSUP: Sleep queues added to kernel, so be careful.
Message-ID:  <20040229002147.GA1351@crodrigues.org>
In-Reply-To: <20040228131212.G8264-100000@oahu.WURLDLINK.NET>
References:  <Pine.NEB.3.96L.1040228172334.24114O-100000@fledge.watson.org> <20040228131212.G8264-100000@oahu.WURLDLINK.NET>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

I just cvsup'd my box, and am having the same problem
as Vincent.

I have these lines in my /etc/rc.conf:

firewall_type="open"
natd_enable="YES"
natd_interface="xl0"
natd_flags="-redirect_port tcp 192.168.0.2:80-9000 80-9000 -redirect_port tcp 19
2.168.0.3:80-9000 80-9000"


If I capture the boot output with:
vidcontrol -H -P > bootup.txt

I see these lines:

Flushed all rules.
00050 divert 8668 ip from any to any via xl0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
65000 allow ip from any to any
Firewall rules loaded, starting divert daemons: natd: Unable to bind divert socket.: Can't assign requested address
.
net.inet.ip.fw.enable: 1 -> 1



I added some additional statements to /etc/rc.d/ipfw so
that it prints out the natd command:

Firewall rules loaded, starting divert daemons: natd: /sbin/natd -redirect_port tcp 192.168.0.2:80-9000 80-9000 -redirect_port tcp 192.168.0.3:80-9000 80-9000 -dynamic -n xl0
natd: Unable to bind divert socket.: Can't assign requested address
.
net.inet.ip.fw.enable: 1 -> 1



After bootup, if I execute /sbin/natd from the command-line,
I do not get this error message.

-- 
Craig Rodrigues        
http://crodrigues.org
rodrigc@crodrigues.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040229002147.GA1351>