From owner-freebsd-current@FreeBSD.ORG Thu Mar 13 05:09:17 2008 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 078CB1065671 for ; Thu, 13 Mar 2008 05:09:17 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from smtp10.yandex.ru (smtp10.yandex.ru [213.180.223.92]) by mx1.freebsd.org (Postfix) with ESMTP id 654638FC25 for ; Thu, 13 Mar 2008 05:09:16 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from ns.kirov.so-cdu.ru ([77.72.136.145]:46062 "EHLO [127.0.0.1]" smtp-auth: "bu7cher" TLS-CIPHER: "DHE-RSA-AES256-SHA keybits 256/256 version TLSv1/SSLv3" TLS-PEER-CN1: ) by mail.yandex.ru with ESMTP id S5865719AbYCMFJO (ORCPT ); Thu, 13 Mar 2008 08:09:14 +0300 X-Yandex-Spam: 1 X-Yandex-Front: smtp10 X-Yandex-TimeMark: 1205384954 X-MsgDayCount: 2 X-Comment: RFC 2476 MSA function at smtp10.yandex.ru logged sender identity as: bu7cher Message-ID: <47D8B6F8.8010203@yandex.ru> Date: Thu, 13 Mar 2008 08:09:12 +0300 From: "Andrey V. Elsukov" User-Agent: Mozilla Thunderbird 1.5 (FreeBSD/20051231) MIME-Version: 1.0 To: Randy Bush References: <47D8438F.5050706@psg.com> In-Reply-To: <47D8438F.5050706@psg.com> Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit Cc: current@freebsd.org Subject: Re: ipfw me6 forward X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Mar 2008 05:09:17 -0000 Randy Bush wrote: > # ipfw add fwd me6,5222 tcp from any to me6 15222 > ipfw: getsockopt(IP_FW_ADD): Invalid argument > > > and, yes, the kernel has the option > > # grep IPF /sys/i386/conf/WORK0 > options IPFIREWALL_FORWARD You need "options IPFIREWALL" too. Seems you don't have IPFIREWALL compiled into kernel. Look into `grep ipfw2 /var/run/dmesg.boot` -- WBR, Andrey V. Elsukov