From owner-freebsd-questions Sun Jul 8 21:33: 3 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.arc.net.my (nagano.arc.net.my [203.115.225.22]) by hub.freebsd.org (Postfix) with ESMTP id 272D437B403 for ; Sun, 8 Jul 2001 21:32:52 -0700 (PDT) (envelope-from llchan@eweb-asia.com) Received: from llchan ([202.75.144.37]) by mail.arc.net.my (Netscape Messaging Server 4.15) with SMTP id GG6VAP00.D12; Mon, 9 Jul 2001 12:32:49 +0800 Message-ID: <005301c1082f$2985bc40$25904bca@ewebasia.com> From: "Chan" To: "Dennis White" Cc: References: <20010709042401.36687.qmail@web13907.mail.yahoo.com> Subject: Re: IPFW error message Date: Mon, 9 Jul 2001 12:25:15 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Dennis, I think you need IPDIVERT to be built in together... IPDIVERT will enables the divert IP sockets, used by 'ipfw divert' Regards, Ling Ling ----- Original Message ----- From: "Dennis White" To: "Chan" Cc: Sent: Monday, July 09, 2001 12:24 PM Subject: Re: IPFW error message > Here's the firewall part of the kernel config: > options IPFIREWALL > options IPFIREWALL_VERBOSE > options IPFIREWALL_VERBOSE_LIMIT=100 > options IPFIREWALL_DEFAULT_TO_ACCEPT > Hope that helps. This is like a test machine > too. Just an old toshiba laptop I'm learning > the os on. > > --- Chan wrote: > > Hi, Dennis, > > > > Anyway, my one is a testing server. So, no problem of > > installation. :-)) > > > > Do you mind to to post your kernel options for IPFIREWALL? > > > > This might help:- > > www.freebsd-howto.com > > http://www.onlamp.com/lpt/a//bsd/2001/04/25/FreeBSD_Basics.html > > > > Regards,Ling Ling > > ----- Original Message ----- > > From: "Dennis White" > > To: "Chan" > > Cc: > > Sent: Monday, July 09, 2001 10:59 AM > > Subject: Re: IPFW error message > > > > > > > Hi Ling Ling, > > > Kernel secure level same as yours, -1. Left like that > > > with the default to accept all in the kernel config > > > & later to establish all security with rules set for > > > rc.firewall & rc.conf. And you say you reinstalled > > > entire freebsd again? Hate to do that if possible > > > not to. Rather try to figure out how to fix it, but > > > I may be forced to, now that all my experimenting & > > > cvsup have been done. :-) > > > > > > --- Chan wrote: > > > > Hi, dennis, > > > > > > > > Did you turn on the kernel securelevel? that's what happen > > to > > > > my baby > > > > (freebsd). So, I think this will help you ... > > > > You may want to take that option out since it will actually > > > > create a lot of > > > > problems while compiling. Things went smooth when I > > compiled > > > > but it did not > > > > work at all too ... Eventually, I re-install it, "re-make" > > > > world and also > > > > the kernel, and it runs !!!! Of course with the original > > > > kernel_securelevel= -1 ... hehe > > > > > > > > Regards, > > > > Ling Ling > > > > ----- Original Message ----- > > > > From: "Dennis White" > > > > To: > > > > Cc: > > > > Sent: Monday, July 09, 2001 7:52 AM > > > > Subject: Re: IPFW error message > > > > > > > > > > > > > I'm getting the same error. Ran kldstat -v | grep ipf & > > > > > got back "206 ipfw". Just learning about it, so had to > > > > > guess that the 206 is the PID. Ran ps x | grep ipfw & got > > > > > "344 v0 S+". Then I ran ps x | grep 206 & got > > > > > "206 ?? Is 0:00:02 inetd -wW". Trying to find out if > > it's > > > > > not loading right. I have everything compiled into the > > > > > kernel for IPFW support that's required, so not sure what > > > > > the problem is, unless something's broken from cvsup, > > which > > > > > I did about a week & a half ago with no apparent ill > > results > > > > > at the time. Everything made & installed without any > > errors. > > > > > Only time consuming was in having to manually merge > > several > > > > > files, including rc.conf. Thanks. > > > > > > > > > > > > > > > --- James Lim wrote: > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > > > Hash: SHA1 > > > > > > > > > > > > Hi Ling Ling, > > > > > > > > > > > > > > > > > > try checking whether ipfw is loaded correctly, kldstat > > -v | > > > > > > grep ipf > > > > > > If it is not, try loading the module. The last time > > that > > > > > > happened was > > > > > > due to an improper make world, although it was compiled > > in > > > > > > kernel. > > > > > > > > > > > > Hope this helps > > > > > > > > > > > > On the last episode Saturday 07 July 2001 16:45, Ling > > Ling > > > > > > wrote: > > > > > > > Hi, > > > > > > > > > > > > > > I come across this error message in my FreeBSD-4.2 > > server > > > > > > when I > > > > > > > started firewall rules : > > > > > > > > > > > > > > ipfw: getsockopt(IP_FW_ADD): Invalid argument > > > > > > > > > > > > > > I had all IPFIREWALL kernel options built and when I > > ' > > > > > > kldload -v | > > > > > > > grep ipfw' the ipfw is there .... any clues on this > > ?? > > > > > > > > > > > > > > Thanks & Regards, > > > > > > > Ling Ling > > > > > > > > > > > > - ---------------------------------------- > > > > > > Content-Type: text/html; charset="iso-8859-1"; > > > > > > name="Attachment: 1" > > > > > > Content-Transfer-Encoding: quoted-printable > > > > > > Content-Description: > > > > > > - ---------------------------------------- > > > > > > > > > > > > - -- > > > > > > Regards, > > > > > > James Lim > > > > > > http://sg.freebsd.org | http://www.bsd-geeks.org > > > > > > -----BEGIN PGP SIGNATURE----- > > > > > > Version: PGP 6.5.8 > > > > > > > > > > > > > > > > > > > > > > > > > > > iQA/AwUBO0bWdZpTakonTMbIEQJztACfclm6Bu5zjOFnmUOVXLQPlQMClakAoL/F > > > > > > YZLtCA26zEcwK2IdrWNYoyjW > > > > > > =FGjS > > > > > > -----END PGP SIGNATURE----- > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > > > with "unsubscribe freebsd-questions" in the body of the > > > > message > > > > > > > > > > > > > > > ===== > > > > > dennywhite@yahoo.com > > > > > ICQ# 759271 > > > > > =================================== > > > > > Unix is like a wigwam -- no gates, > > > > > no windows, and an apache inside. > > > > > =================================== > > > > > > > > > > __________________________________________________ > > > > > Do You Yahoo!? > > > > > Get personalized email addresses from Yahoo! Mail > > > > > http://personal.mail.yahoo.com/ > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > > with "unsubscribe freebsd-questions" in the body of the > > > > message > > > > > > > > > > > > > ===== > > > dennywhite@yahoo.com > > > ICQ# 759271 > > > =================================== > > > Unix is like a wigwam -- no gates, > > > no windows, and an apache inside. > > > =================================== > > > > > > __________________________________________________ > > > Do You Yahoo!? > > > Get personalized email addresses from Yahoo! Mail > > > http://personal.mail.yahoo.com/ > > > > > ===== > dennywhite@yahoo.com > ICQ# 759271 > =================================== > Unix is like a wigwam -- no gates, > no windows, and an apache inside. > =================================== > > __________________________________________________ > Do You Yahoo!? > Get personalized email addresses from Yahoo! Mail > http://personal.mail.yahoo.com/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message