From owner-freebsd-stable Mon Nov 18 14:16:37 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EFB8A37B401 for ; Mon, 18 Nov 2002 14:16:35 -0800 (PST) Received: from smurf.jnielsen.net (12-254-140-119.client.attbi.com [12.254.140.119]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4595543E77 for ; Mon, 18 Nov 2002 14:16:35 -0800 (PST) (envelope-from john@jnielsen.net) Received: from buff.local (buff.local [192.168.0.10]) by smurf.jnielsen.net (8.12.6/8.12.6) with ESMTP id gAIMFuBo017479; Mon, 18 Nov 2002 15:15:56 -0700 (MST) (envelope-from john@jnielsen.net) Content-Type: text/plain; charset="koi8-r" From: John Nielsen To: "Vladislav V. Zhuk" , stable@FreeBSD.ORG Subject: Re: IPFW2 and FreeBSD 4.7-RELEASE-p2 #0: Sun Nov 17 19:25:19 Date: Mon, 18 Nov 2002 15:21:26 -0700 User-Agent: KMail/1.4.3 References: <20021118212653.GA68828@dru.dn.ua> In-Reply-To: <20021118212653.GA68828@dru.dn.ua> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Message-Id: <200211181521.26955.john@jnielsen.net> Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Monday 18 November 2002 14:26, Vladislav V. Zhuk wrote: > Hi! > > I added "options IPFW2" to my kernel config, and "IPFW2=3DTRUE" > to /etc/make.conf, cvsuped to RELENG_4_7. > Make and install world/kernel, run mergemaster. > After update (I did this routinely) IPFW don't forward packets. > Divert, allow, deny, reject - all work fine, fwd don't work. > > What can I do to use forward in IPFW2 ?? > Help!!! This is a known bug that, unfortunately, was not fixed before the release= of=20 4.7. There is a patch that addresses the fwd issue, but I can't find it = at=20 the moment. What I have done on my machines that use ipfw2 is import the= =20 updated code from -stable. I did so at Luigi Rizzo's (the code author)=20 suggestion, and it works fine. Just grab src/sys/netinet/ip_fw* and=20 src/sbin/ipfw/* from -STABLE. JN To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message