Date: Wed, 24 Jan 2001 23:49:51 -0500 From: "Andrew J. Siegel" <structure@home.com> To: "'Jonathan Chen'" <jonathan.chen@itouch.co.nz> Cc: "Freebsd-Questions (E-mail)" <freebsd-questions@FreeBSD.ORG> Subject: RE: ipfw/nat Message-ID: <007401c0868a$41870370$768a0218@htfdw1.ct.home.com> In-Reply-To: <20010124100643.B39995@itouchnz.itouch>
next in thread | previous in thread | raw e-mail | index | archive | help
IPDIVERT enabled, RULE-BASED FORWARDING ENABLED
-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jonathan Chen
Sent: Tuesday, January 23, 2001 4:07 PM
To: Andrew J. Siegel
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: ipfw/nat
On Tue, Jan 23, 2001 at 03:42:12PM -0500, Andrew J. Siegel wrote:
> Alright just installed 4.2 w/ sysinstall....added options IPFIREWALL
options
> IPDIVER options IPFIREWALL_FORWARD all to my kernnel config (icebox2)
> config'd and compile....did sysctl -a | grep fw...and fw.enable is set to
> 1....ipfw show issues one allow all for static commands, and something
> unknown for dynamic commands..
>
> try adding ipfw add 500 divert natd all from any to any via rl0
>
> and receive error:
> ipfw: getsockopt(IP_FW_ADD) INVALID ARGUMENT
This usually indicates that you haven't *installed* a kernel with
IPDIVERT options set. Send the list of your dmesg output.
--
Jonathan Chen | To do is to be -- Nietzsche
<jonathan.chen@itouch.co.nz> | To be is to do -- Sartre
| Scooby do be do -- Scooby
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?007401c0868a$41870370$768a0218>