From owner-freebsd-net@FreeBSD.ORG  Sat Sep 23 02:19:47 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2283816A40F
	for <freebsd-net@freebsd.org>; Sat, 23 Sep 2006 02:19:47 +0000 (UTC)
	(envelope-from jyavenard@gmail.com)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.191])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 706FA43D46
	for <freebsd-net@freebsd.org>; Sat, 23 Sep 2006 02:19:46 +0000 (GMT)
	(envelope-from jyavenard@gmail.com)
Received: by nf-out-0910.google.com with SMTP id n29so1375158nfc
	for <freebsd-net@freebsd.org>; Fri, 22 Sep 2006 19:19:45 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=KGpYV3xWV9iJJugtU6Rlemqvxp3XpTboFIrw9VXAfiFX7Zc1vif4tR8HOu8iDrr0p/0SfnnzXelfLQfH9x57QA2s5bMnTTFg/vtzsqelHWbjiFWUArKF+RFrm2doBKz6qt47IJxx63OiIBQxcSTtyOdA9eCXKo2T81Xu/+1AIy0=
Received: by 10.49.55.13 with SMTP id h13mr2828150nfk;
	Fri, 22 Sep 2006 19:19:45 -0700 (PDT)
Received: by 10.49.80.17 with HTTP; Fri, 22 Sep 2006 19:19:44 -0700 (PDT)
Message-ID: <cb44e8370609221919y3a6d701do6fc3eecc3ddaf2df@mail.gmail.com>
Date: Sat, 23 Sep 2006 12:19:44 +1000
From: "Jean-Yves Avenard" <jyavenard@gmail.com>
To: "Julian Elischer" <julian@elischer.org>
In-Reply-To: <45148856.8020109@elischer.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <cb44e8370609221728t2c20f5cfp7b9f914858225e91@mail.gmail.com>
	<45148856.8020109@elischer.org>
Cc: freebsd-net@freebsd.org
Subject: Re: Issue with IPFW forward
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Sep 2006 02:19:47 -0000

Hi


On 9/23/06, Julian Elischer <julian@elischer.org> wrote:
> there is a stupid option in 6.1 (that I have removed in 6.2)
> called IPFIREWALL_FORWARD_EXTENDED
> (check the spelling)
> if you don't have it you can not forward any packet that has a local
> address as either
> the source or destination... See if setting it fixes your problem,
> in 6.2 you shouldn't have to worry about it (certainly in 7.0)

Thanks, I will try this immediately.

Will let you know if that fixes the problem
Jean-Yves