From owner-freebsd-net@FreeBSD.ORG  Thu Apr 21 17:37:57 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 257A316A4CE
	for <freebsd-net@freebsd.org>; Thu, 21 Apr 2005 17:37:57 +0000 (GMT)
Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 84FAA43D49
	for <freebsd-net@freebsd.org>; Thu, 21 Apr 2005 17:37:56 +0000 (GMT)
	(envelope-from andre@freebsd.org)
Received: (qmail 71216 invoked from network); 21 Apr 2005 17:39:45 -0000
Received: from unknown (HELO freebsd.org) ([62.48.0.53])
          (envelope-sender <andre@freebsd.org>)
          by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP
          for <kfl@xiphos.ca>; 21 Apr 2005 17:39:45 -0000
Message-ID: <4267E4F3.45CD30AF@freebsd.org>
Date: Thu, 21 Apr 2005 19:37:55 +0200
From: Andre Oppermann <andre@freebsd.org>
X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Karim Fodil-Lemelin <kfl@xiphos.ca>
References: <4267E0FA.9060004@xiphos.ca>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: freebsd-net@freebsd.org
Subject: Re: ipfw fwd to localhost
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Apr 2005 17:37:57 -0000

Karim Fodil-Lemelin wrote:
> 
> Hi,
> 
>     I just did a cvsup of RELENG_5 and got some problem doing forwarding
> to localhost using a rule like this:
> 
> ipfw add fwd 127.0.0.1,1234 tcp from any to any in via re1
> 
>     I have those options in my kernel config:
> 
> options   IPFIREWALL
> options   IPFIREWALL_FORWARD_EXTENDED
> options   IPFIREWALL_DEFAULT_TO_ACCEPT
> 
>     I understand that 5.4 is using ipfw2 by default so I did not add
> IPFW2="YES" in /etc/make.conf and used the ipfw that I had installed
> with 5.3.
> 
> The error I get is somehting like setsockopt (IP_FW_ADD) invalid
> argument when issuing the ipfw call.

You need this option too:

 options   IPFIREWALL_FORWARD

-- 
Andre