From: Cy Schubert - CITS Open Systems Group (Cy.Schubert~AT~uumail.gov.bc.ca)
Date: Sun Sep 15 2002 - 19:35:19 CEST
In message <01C25C3A.BD742800.phunkirchen~AT~t-online.de>, Hunkirchen writes:
> I've the same problem!
> Did you get a solution yet?
> I'm using FreeBSD 4.6.2.
FreeBSD comes with two firewalls, IPFW and IP Filter (IPF).
> ipf -V
> ipf: IP Filter: v3.4.27 (336)
> open device: Device not configured
IP Filter has not been configured in your kernel.
> My LogFile is security.
> An example of the entries is here:
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 220.127.116.11:1321 80.135.2
> 2.160:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 18.104.22.168:1321 217.225.
> 174.94:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 22.214.171.124:1321 61.139.9
> 6.14:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 126.96.36.199:1321 217.226.
> 215.153:4665 out via tun0
You're using IPFW.
> fwanalog -h
> local: \t\t: bad variable name
> fwanalog ver. 0.6.1
> in fwanalog.opts i've set the option dynip, because I connect the internet ab
> out T-Online.
> analog -help
> This is analog version 5.22/Unix
> Please let me know, there is a solution!
> Thank you!
Fwanalog supports IP Filter. It does not support IPFW. Disable IPFW by removing "options IPFIREWALL" from your kernel or specifying firewall_enable="NO" in rc.conf. Enable IP Filter by specifying ipfilter_enable="YES" in rc.conf. If you want to use the kld, that's all you need to do. If you want to statically link IP Filter in the kernel, instead of using the kld, you'll need to specify the IPFILTER and IPFILTER_LOG options in your kernel config file and build a new kernel.
-- Cheers, Phone: 250-387-8437 Cy Schubert Fax: 250-387-5766 Team Leader, Sun/Alpha Team Email: Cy.Schubert~AT~osg.gov.bc.ca Open Systems Group, CITS Ministry of Management Services Province of BC FreeBSD UNIX: cy~AT~FreeBSD.org
This archive was generated by hypermail 2.1.5 : Wed Oct 23 2002 - 14:22:02 CEST