From owner-freebsd-hackers  Thu Jun 26 16:52:06 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id QAA20500
          for hackers-outgoing; Thu, 26 Jun 1997 16:52:06 -0700 (PDT)
Received: from panda.hilink.com.au (panda.hilink.com.au [203.8.15.25])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id QAA20426
          for <freebsd-hackers@freebsd.org>; Thu, 26 Jun 1997 16:52:00 -0700 (PDT)
Received: (from danny@localhost)
	by panda.hilink.com.au (8.8.5/8.8.5) id JAA22149;
	Fri, 27 Jun 1997 09:51:39 +1000 (EST)
Date: Fri, 27 Jun 1997 09:51:38 +1000 (EST)
From: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To: Alejandro Galindo Chairez <agalindo@asimov.io.com.mx>
cc: freebsd-hackers@freebsd.org
Subject: Re: ipfw: setsockopt failed
In-Reply-To: <1.5.4.32.19970626200702.0068336c@io.com.mx>
Message-ID: <Pine.BSF.3.91.970627094639.869r-100000@panda.hilink.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Thu, 26 Jun 1997, Alejandro Galindo Chairez wrote:

> I have the next problem:
> 
> When the "ipfw flush" comand is executed the system send me the message:
> setsockopt failed

You must (a) build a kernel with IPFIREWALL or ; (b) load the kernel module

# modload /lkm/ipfw_mod.o

Do not load the LKM across the network - only at the console.  When you 
load the module, all internet access becomes disabled until you enable it 
with 'ipfw add 65000 allow all from any to any'.

I am working on rc.conf changes to make this easier to work with.  I'll 
send them to you when I finish them.

BTW, please don't post to three lists at once.  Try one.  If you get no 
answer, try another.

Danny