From owner-freebsd-questions Fri May 12 8:23: 3 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mailhop1.nyroc.rr.com (mailhop1-1.nyroc.rr.com [24.92.226.166]) by hub.freebsd.org (Postfix) with ESMTP id C5BBE37BDDD for ; Fri, 12 May 2000 08:23:00 -0700 (PDT) (envelope-from dheller1@rochester.rr.com) Received: from mailout2.nyroc.rr.com ([24.92.226.121]) by mailhop1.nyroc.rr.com (Post.Office MTA v3.5.3 release 223 ID# 0-59787U250000L250000S0V35) with ESMTP id com; Fri, 12 May 2000 11:19:29 -0400 Received: from rochester.rr.com ([24.24.34.106]) by mailout2.nyroc.rr.com (Post.Office MTA v3.5.3 release 223 ID# 0-59787U250000L250000S0V35) with ESMTP id com; Fri, 12 May 2000 11:10:52 -0400 Message-ID: <391C21CC.8283B2B7@rochester.rr.com> Date: Fri, 12 May 2000 11:22:52 -0400 From: David Heller X-Mailer: Mozilla 4.72 [en] (X11; U; FreeBSD 4.0-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: "O. Hartmann" Cc: freebsd-questions@freebsd.org Subject: Re: IPFILTER vs IPFIREWALL References: Content-Type: text/plain; charset=x-user-defined Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG "O. Hartmann" wrote: > > Well ... > It is horrible! Simply horrible! Where the hell do I get the right informations what > kernel option is necessary for either IPFILTER or IPFIREWALL? The machine I use is really slow > and any experiment takes about 30 minutes to recompile a kernel, so changing something four times means > two hours of useless work! > > Dummynet will not work with IPFIREWALL ... where is this problem mentioned in the documentation? > > Well, I need some clue! > > Thanks a lot! > > Gruss O. Hartmann > ------------------------------------------------------------------- > ohartman@ipamzlx.physik.uni-mainz.de > > Klimadatenserver des IPA, Universitaet Mainz > Netzwerk- und Systembetreuung > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message You need IPDIVERT and IPFIREWALL options in your config file. Do NOT have IPFILTER option enabled in your config file!! Your firewall command will then be /sbin/ipfw. This will at least get you started. Also try man ipfw there is a lot of good information there also. Good Luck Dave To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message