Re: IPFIREWALL_FORWARD sysctl variable

From: Steve Bertrand (iaccounts_at_ibctech.ca)
Date: 07/09/04

  • Next message: Brian Clapper: "Re: Apache log rotation problems"
    Date: Fri, 9 Jul 2004 12:00:55 -0400 (EDT)
    To: "Markie" <mark.cullen@dsl.pipex.com>
    
    

    > | Before I install a new kernel and have to reboot a machine, I thought
    > I'd
    > | ask if there was a sysctl variable that can toggle the IPFIREWAL_FORWARD
    > | option.
    > |
    >
    > There's net.inet.ip.forwarding but i'm not sure if it's read only or even
    > perhaps if it exists/works without that in the kernel.

    I believe that net.inet.ip.forwarding is equivilant to gateway_enable in
    rc.conf (enable the box as a router). I have no idea if the fwd is part of
    that feature or not.

    I can see IPFW picking up the fwd rule, but the box that it is forwarding
    to does not see the traffic.

    BTW, I am trying to forward proxy traffic from one box to another box (on
    a remote network) just as a test. I'll eventually implement the theory in
    a transparent proxy setup.

    I'm just going to install the kernel and see what happens.

    Tks for the info.

    Steve

    >
    > | Tks.
    > |
    > | Steve
    > |
    > | _______________________________________________
    > | freebsd-questions@freebsd.org mailing list
    > | http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > | To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >
    >

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Brian Clapper: "Re: Apache log rotation problems"

    Relevant Pages

    • Re: symlink confusion
      ... Steve ... >> entire directory structure deleted by deleting the link? ... >> Tks for your input. ... To unsubscribe, ...
      (freebsd-questions)
    • Re: newbie trouble - Internet connection
      ... Steve ... To unsubscribe, ...
      (freebsd-questions)
    • Re: Chinese censorship Re: Is my system compromised
      ... Aren't they using some sort of huge transparent proxy setup? ... In fact ISP's can block ranges of ipaddresses by placing access lists on ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ... Trouble? ...
      (Debian-User)
    • Re: help
      ... it is at the bottom of this message as well as it is at the bottom ... there are some other mailman lists that i subscribe to that auto send ... unsubscribe and help messages once a month..... ... Steve Reilly ...
      (Ubuntu)
    • Re: DirectX - Missing Files
      ... Tks Rich, tried it. ... > Steve, go here and download and install DirectX Eradicator. ...
      (microsoft.public.windowsxp.general)