Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Jan 2001 15:07:16 -0500
From:      "Andrew J. Siegel" <structure@home.com>
To:        "'Mikel King'" <mikel@ocsinternet.com>, "Freebsd-Questions (E-mail)" <freebsd-questions@FreeBSD.ORG>
Subject:   RE: ipfw/nat
Message-ID:  <004201c087d3$94efb300$768a0218@htfdw1.ct.home.com>
In-Reply-To: <3A700BEC.FA5DCFC@ocsinternet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
i think forward would cause inability to enter commands in ipfw...still have
no luck entering anything.

-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Mikel King
Sent: Thursday, January 25, 2001 6:20 AM
To: Andrew J. Siegel
Cc: 'Jonathan Chen'; Freebsd-Questions (E-mail)
Subject: Re: ipfw/nat


recommend not to use the IPFORWARD option thus; RULE-BASED FORWARDING
DISABLED
as I have had problems with NATD and this option running on 4.2...

Cheers,
Mikel

"Andrew J. Siegel" wrote:

> IPDIVERT enabled, RULE-BASED FORWARDING ENABLED
>
> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jonathan Chen
> Sent: Tuesday, January 23, 2001 4:07 PM
> To: Andrew J. Siegel
> Cc: freebsd-questions@FreeBSD.ORG
> Subject: Re: ipfw/nat
>
> On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote:
> > Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL
> options
> > IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2)
> > config'd and compile....did sysctl -a | grep fw...and fw.enable is set
to
> > 1....ipfw show issues one allow all for static commands, and something
> > unknown for dynamic commands..
> >
> > try adding ipfw add 500 divert natd all from any to any via rl0
> >
> > and receive error:
> > ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT
>
> This usually indicates that you haven't *installed* a kernel with
> IPDIVERT options set. Send the list of your dmesg output.
> --
> Jonathan Chen                      |      To do is to be  -- Nietzsche
> <jonathan.chen@itouch.co.nz>       |      To be is to do  -- Sartre
>                                    |      Scooby do be do -- Scooby
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004201c087d3$94efb300$768a0218>