From owner-freebsd-net@FreeBSD.ORG Sun Mar 6 16:13:58 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 253931065675 for ; Sun, 6 Mar 2011 16:13:58 +0000 (UTC) (envelope-from ctfreebsd@gmail.com) Received: from mail-yx0-f182.google.com (mail-yx0-f182.google.com [209.85.213.182]) by mx1.freebsd.org (Postfix) with ESMTP id D642D8FC0A for ; Sun, 6 Mar 2011 16:13:57 +0000 (UTC) Received: by yxl31 with SMTP id 31so1534456yxl.13 for ; Sun, 06 Mar 2011 08:13:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=8nLDnN72iSIl/40qWAuHRXk2SBTv2YgdQ+wXo1OBUkQ=; b=Mpu45OhkGSL/O140kkqENmfBgrBIW0ZQllP0H7sNgsAsHgq6UVz6a706WfTQECXao2 JRzTrpgnLA/6QR6u9F3ySfH9BiagQkhng2YIbEP0Oc7NUELIDle4CAtS4B/Hp1AvqjlT JvK3KXEie75oS4vjQhRq/TAUJU1dg6jJAns90= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=d4uIYGBK1LpAQXFFsCJONon36eOA//xRMFFonrIXyXa+f2VB2e1DnwF7tEwGQq/BgH yPxq2KXY605SYemY+lbKyqin7xu3qmpLOxtwTFupdW5Fu6UJfWhy9BjeGkzaFZazpevL Yt9Dp3R/jY+jxOfVpViXokRjwnp/Fks26vHrM= MIME-Version: 1.0 Received: by 10.236.182.66 with SMTP id n42mr1564091yhm.48.1299426530525; Sun, 06 Mar 2011 07:48:50 -0800 (PST) Received: by 10.147.171.19 with HTTP; Sun, 6 Mar 2011 07:48:50 -0800 (PST) Date: Sun, 6 Mar 2011 17:48:50 +0200 Message-ID: From: Dave Johnson To: freebsd-net@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: An IPFW problem when going from release to stable on 8.2/ Maybe bge0 network card? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Mar 2011 16:13:58 -0000 Hi all An IPFW problem when going from release to stable on 8.2 An help gladly accepted LOG ON Flushed all rules. 00010 allow ip from 127.0.0.1 to 127.0.0.1 via lo0 00030 divert 8668 ip from any to any via bge0 ipfw: getsockopt(IP_FW_ADD): Invalid argument 50000 allow ip from any to any Firewall rules loaded. Starting natd. rc.conf defaultrouter="192.168.0.1" gateway_enable="YES" hostname="xxx.xxx.xxx" ifconfig_bge0="inet 192.168.0.11 netmask 255.255.255.0" ifconfig_em0="inet 192.168.1.2 netmask 255.255.255.0" keymap="us.iso" moused_enable="YES" sshd_enable="YES" firewall_enable="YES" firewall_script="/etc/rc.firewall" natd_program="/sbin/natd" natd_enable="YES" natd_interface="bge0" natd_flags="-f /etc/natd.conf" dhcpd_enable="NO" dhcpd_flags="-q" dhcpd_conf="/usr/local/etc/dhcpd.conf" dhcpd_ifaces="em0" dhcpd_withumask="022" natd.conf interface bge0 use_sockets yes same_ports yes log #redirect_port tcp 192.168.1.189:3389 3389 #redirect_port tcp 192.168.1.53:5500 5500 #!/bin/sh /sbin/ipfw -f flush /sbin/ipfw -f pipe flush #Nat Rules /sbin/ipfw add 10 allow ip from 127.0.0.1 to 127.0.0.1 via lo0 /sbin/ipfw add 30 divert natd all from any to any via bge0 #Forward to Transparent Proxy Server #/sbin/ipfw add 10001 fwd 127.0.0.1,3128 tcp from any to any 80 #/sbin/ipfw add 10010 fwd 127.0.0.1,3128 tcp from 10.0.21.2 to any 80 /sbin/ipfw add 10001 fwd 127.0.0.1,3128 tcp from any to any 80 /sbin/ipfw add 50000 allow ip from any to any KERNEL options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=5 options IPFIREWALL_DEFAULT_TO_ACCEPT options IPDIVERT options DUMMYNET Regards