From owner-freebsd-questions  Tue Dec  5  8:32:56 2000
From owner-freebsd-questions@FreeBSD.ORG  Tue Dec  5 08:32:50 2000
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.hcvlny.cv.net (mx1.hcvlny.cv.net [167.206.112.76])
	by hub.freebsd.org (Postfix) with ESMTP id C878337B400
	for <questions@freebsd.org>; Tue,  5 Dec 2000 08:32:49 -0800 (PST)
Received: from s1.optonline.net (s1.optonline.net [167.206.112.6])
	by mx1.hcvlny.cv.net (8.10.2/8.10.2) with ESMTP id eB5GWmt21015;
	Tue, 5 Dec 2000 11:32:48 -0500 (EST)
Received: from optonline.net (ool-18bd8597.dyn.optonline.net [24.189.133.151])
	by s1.optonline.net (8.10.2/8.10.2) with ESMTP id eB5GWlt05702;
	Tue, 5 Dec 2000 11:32:48 -0500 (EST)
Sender: root@s1.optonline.net
Message-ID: <3A2D18AF.6C8E78EA@optonline.net>
Date: Tue, 05 Dec 2000 11:32:47 -0500
From: trini0 <trini0@optonline.net>
X-Mailer: Mozilla 4.75 [en] (X11; U; FreeBSD 4.2-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: joskis <joskis@xxx.lt>, FreeBSD Questions <questions@freebsd.org>
Subject: Re: freebsd 4.2 & ipfilter
References: <019601c05eca$315b36c0$7d01a8c0@FLONIDAN>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Im still a newbie, but here goes......

joskis wrote:

> hi,
>
> i have a error, when loading rules for ipfilter:
> ---
> host#  ipf -Fa -f /etc/ipf.rules
> 1:ioctl(add/insert rule): No such process

make sure ipfil, ipauth, ipnat & ipstat are in /dev

>
> ---
>
> ipfilter is compiled into kernel.
> after that, i test ipfilter:
> ---
> host# ipstat -i -o
> ---
>

"ipfstat"

>
> and rules seems to be added.
> why ipfilter shows this message? and how fix it?
>

The only other thing I could think of is that your security level is set to
high.
Reconfigure /etc/rc.conf and uncomment out kern_securitylevel &
kern_securitylevel_enable.  Reboot and try the ipf command again.

>
> and plius, the kernel options: ipdivert & ipstealth are for ipfirewall or
> for ipfilter also?
>

They are for ipfirewall only......

>
> thanks,
> joskis
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

--

         _____________________________
         |          trini0           |
         |                           |
     / ) | Systems Administrator     |
    / /  | Network Engineer          |
   ( (   | email ==>                 |
 (((\ \> |/ )  trini0@optonline.net  |
 (\\\\ \_/ /_________________________|
  \       /
   \    _/
   /   /
  /   /





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message