From owner-freebsd-questions  Sat Dec  2 14:04:58 1995
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id OAA29740
          for questions-outgoing; Sat, 2 Dec 1995 14:04:58 -0800
Received: from rocky.sri.MT.net (rocky.sri.MT.net [204.182.243.10])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id OAA29717
          for <questions@freebsd.org>; Sat, 2 Dec 1995 14:04:50 -0800
Received: (from nate@localhost) by rocky.sri.MT.net (8.6.12/8.6.12) id PAA29306; Sat, 2 Dec 1995 15:06:33 -0700
Date: Sat, 2 Dec 1995 15:06:33 -0700
From: Nate Williams <nate@rocky.sri.MT.net>
Message-Id: <199512022206.PAA29306@rocky.sri.MT.net>
To: Craig Shrimpton <craigs@os.com>
Cc: questions@freebsd.org
Subject: Re: Firewalling
In-Reply-To: <Pine.3.89.9512021645.A22890-0100000@solar.os.com>
References: <Pine.3.89.9512021645.A22890-0100000@solar.os.com>
Sender: owner-questions@freebsd.org
Precedence: bulk

> How do I enable firewalling on 2.1.0?  When I try to use it I get 
> ipfw: setsockopt failed.  This happens even when I do ipfw flush.

Don't worry about it, assuming you've got the IPFIREWALL option in your
kernel.  It's normal since the ipfw program is also trying to list the
accounting records.

If you don't have the IPFIREWALL option in your kernel, add it and
rebuild your kernel.  You may also want the 'IPFIREWALL_VERBOSE' option
to your kernel if you want to use the log or ldeny options in your
firewall.  Without that option, the code won't log anything so you won't
see the rejects and such.



Nate