From owner-freebsd-i386@FreeBSD.ORG Wed Sep 13 17:20:31 2006 Return-Path: X-Original-To: freebsd-i386@hub.freebsd.org Delivered-To: freebsd-i386@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A8F0516A412 for ; Wed, 13 Sep 2006 17:20:31 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 21B5443D70 for ; Wed, 13 Sep 2006 17:20:31 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k8DHKUhw009999 for ; Wed, 13 Sep 2006 17:20:30 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k8DHKUpo009998; Wed, 13 Sep 2006 17:20:30 GMT (envelope-from gnats) Date: Wed, 13 Sep 2006 17:20:30 GMT Message-Id: <200609131720.k8DHKUpo009998@freefall.freebsd.org> To: freebsd-i386@FreeBSD.org From: Remko Lodder Cc: Subject: Re: i386/103233: ipfw forward does not work X-BeenThere: freebsd-i386@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Remko Lodder List-Id: I386-specific issues for FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Sep 2006 17:20:31 -0000 The following reply was made to PR i386/103233; it has been noted by GNATS. From: Remko Lodder To: Bobrov Alexey Cc: freebsd-gnats-submit@FreeBSD.org Subject: Re: i386/103233: ipfw forward does not work Date: Wed, 13 Sep 2006 19:11:54 +0200 Bobrov Alexey wrote: >> Number: 103233 >> Category: i386 >> Synopsis: ipfw forward does not work >> Confidential: no >> Severity: critical >> Priority: high >> Responsible: freebsd-i386 >> State: open >> Quarter: >> Keywords: >> Date-Required: >> Class: sw-bug >> Submitter-Id: current-users >> Arrival-Date: Wed Sep 13 16:20:22 GMT 2006 >> Closed-Date: >> Last-Modified: >> Originator: Bobrov Alexey >> Release: FreeBSD 5.5-stable >> Organization: > Project-X >> Environment: > FreeBSD gate.club4x4.ru 5.5-STABLE FreeBSD 5.5-STABLE #0: Wed Sep 13 02:07:28 MSD 2006 >> Description: > KERN ->options IPDIVERT > options IPFIREWALL > options IPFIREWALL_FORWARD > options IPFIREWALL_FORWARD_EXTENDED > rc.conf -> firewall_enable=yes gateway_enable=yes firewall_script=/etc/rc.fire > ifconfig_fxp0="inet 192.168.100.4 netmask 255.255.255.0" > > rc.fire -> > ipfw add 88 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any 80,81,8000 > ipfw add 89 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any 8001-9000 > > ipfw show -> > 00088 6034 410828 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any dst-port 80,81,8000 > 00089 3132 382127 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any dst-port 8001-9000 > > But on machine 192.168.100.3 i'v got nothing - all config was accurate working on free 4.8 - 4.11. update was done through backup configuration (rc.conf & etc) then full new install & kernel reassembling - IPFW FWD doesn't work! >> How-To-Repeat: > see full description >> Fix: > >> Release-Note: >> Audit-Trail: >> Unformatted: > _______________________________________________ > freebsd-i386@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-i386 > To unsubscribe, send any mail to "freebsd-i386-unsubscribe@freebsd.org" Hello, I am sorry to tell you this but this is not a Problem (yet); perhaps some syntax changed (which could imply a Problem in the documentation) but I see this as a User question, can you please ask the Freebsd-ipfw (ipfw@FreeBSD.org) group first what they do think about this? http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw is the URL you need. Cheers, Remko p.s. I will close this PR after I submitted this text. -- Kind regards, Remko Lodder ** remko@elvandar.org FreeBSD ** remko@FreeBSD.org /* Quis custodiet ipsos custodes */