From owner-freebsd-questions  Sun Nov  4 23:24:53 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mip.co.za (puck.mip.co.za [209.212.106.44])
	by hub.freebsd.org (Postfix) with ESMTP id D847037B405
	for <questions@FreeBSD.ORG>; Sun,  4 Nov 2001 23:24:26 -0800 (PST)
Received: from patrick (patrick.mip.co.za [10.3.13.181])
	by mip.co.za (8.9.3/8.9.3) with SMTP id JAA73977;
	Mon, 5 Nov 2001 09:23:42 +0200 (SAST)
	(envelope-from patrick@mip.co.za)
From: "Patrick O'Reilly" <patrick@mip.co.za>
To: "Jason Cribbins" <jasonc@concentric.net>, <questions@FreeBSD.ORG>
Subject: RE: ipfw: getsockopt(IP_FW_GET): Protocol not available
Date: Mon, 5 Nov 2001 09:27:12 +0200
Message-ID: <NDBBIMKICMDGDMNOOCAIIEELDNAA.patrick@mip.co.za>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <011901c16548$c33ead80$05d85c42@kibserv.org>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Importance: Normal
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

> I just added the following to my kernel config and rebuilt it:
> options         IPDIVERT
>
> Now I get the following when I try to show, list or add a divert for natd:
> 3:45pm ns1:/ # ipfw show
> ipfw: getsockopt(IP_FW_GET): Protocol not available
> 3:45pm ns1:/ # ipfw list
> ipfw: getsockopt(IP_FW_GET): Protocol not available
> 3:45pm ns1:/ # ipfw add divert natd all from any to any via lnc0
> ipfw: getsockopt(IP_FW_ADD): Protocol not available
> 3:46pm ns1:/ #
>
Jason,

try:
# grep IPFIREWALL /sys/i386/conf/LINT

There are a number of options you might want to include in your own kernel
config, and then (sigh) rebuild the kernel once more.

PS:  While you are about it try:
# grep DUMMYNET /sys/i386/conf/LINT

DUMMYNET can be very useful (for traffic shaping), and it works on top of
the IPFIREWALL stuff.  You don't need to do any config for it at all, until
you are ready to use it, so why not put the support in right away?

Patrick.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message