Re: ipfw fwd to localhost

From: Andre Oppermann (andre_at_freebsd.org)
Date: 04/21/05

  • Next message: dnr: "flood with ng_bridge"
    Date: Thu, 21 Apr 2005 19:37:55 +0200
    To: Karim Fodil-Lemelin <kfl@xiphos.ca>
    
    

    Karim Fodil-Lemelin wrote:
    >
    > Hi,
    >
    > I just did a cvsup of RELENG_5 and got some problem doing forwarding
    > to localhost using a rule like this:
    >
    > ipfw add fwd 127.0.0.1,1234 tcp from any to any in via re1
    >
    > I have those options in my kernel config:
    >
    > options IPFIREWALL
    > options IPFIREWALL_FORWARD_EXTENDED
    > options IPFIREWALL_DEFAULT_TO_ACCEPT
    >
    > I understand that 5.4 is using ipfw2 by default so I did not add
    > IPFW2="YES" in /etc/make.conf and used the ipfw that I had installed
    > with 5.3.
    >
    > The error I get is somehting like setsockopt (IP_FW_ADD) invalid
    > argument when issuing the ipfw call.

    You need this option too:

     options IPFIREWALL_FORWARD

    -- 
    Andre
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    

  • Next message: dnr: "flood with ng_bridge"

    Relevant Pages

    • Re: Simple port forwarding question
      ... You may also try using ssh port forwarding; ... Note that |localhost| will be resolved by the ... therefore refers to the server itself. ...
      (freebsd-net)
    • cvsup from localhost
      ... I run cvsup-mirror at our site. ... most efficient way to cvsup the mirror itself. ... Running cvsup'ping from localhost seems to ...
      (freebsd-questions)
    • Re: ipfw blocking traffic with 127.0.0.1:111
      ... Why would traffic addressed to localhost go out via ... What does the routing table look like? ... Doing any forwarding with IPFW? ...
      (comp.unix.bsd.freebsd.misc)
    • Re: cvsup from localhost
      ... > most efficient way to cvsup the mirror itself. ... > Running cvsup'ping from localhost seems to ... > create quite a load (disk and CPU) on the machine ...
      (freebsd-questions)
    • Re: cvsup from localhost
      ... >> most efficient way to cvsup the mirror itself. ... >> Running cvsup'ping from localhost seems to ... To unsubscribe, ...
      (freebsd-questions)