Re: [fwAnalog] No output with fwanalog 0.6.1 under FreeBSD 4.6.2

From: Cy Schubert - CITS Open Systems Group (Cy.Schubert~AT~uumail.gov.bc.ca)
Date: Sun Sep 15 2002 - 19:35:19 CEST



In message <01C25C3A.BD742800.phunkirchen~AT~t-online.de>, Hunkirchen writes:
> Hi!
>
> I've the same problem!
> Did you get a solution yet?
>
> I'm using FreeBSD 4.6.2.

FreeBSD comes with two firewalls, IPFW and IP Filter (IPF).

>
> ipf -V
> ipf: IP Filter: v3.4.27 (336)
> open device: Device not configured

IP Filter has not been configured in your kernel.

>
> My LogFile is security.
> An example of the entries is here:
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 80.133.124.7:1321 80.135.2
> 2.160:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 80.133.124.7:1321 217.225.
> 174.94:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 80.133.124.7:1321 61.139.9
> 6.14:4665 out via tun0
> Sep 14 21:45:16 yepp /kernel: ipfw: 65435 Deny UDP 80.133.124.7:1321 217.226.
> 215.153:4665 out via tun0

You're using IPFW.

>
> fwanalog -h
> local: \t\t: bad variable name
> fwanalog ver. 0.6.1
>
> in fwanalog.opts i've set the option dynip, because I connect the internet ab
> out T-Online.
>
> analog -help
> This is analog version 5.22/Unix
>
> Please let me know, there is a solution!
> Thank you!

Fwanalog supports IP Filter. It does not support IPFW. Disable IPFW by removing "options IPFIREWALL" from your kernel or specifying firewall_enable="NO" in rc.conf. Enable IP Filter by specifying ipfilter_enable="YES" in rc.conf. If you want to use the kld, that's all you need to do. If you want to statically link IP Filter in the kernel, instead of using the kld, you'll need to specify the IPFILTER and IPFILTER_LOG options in your kernel config file and build a new kernel.

--
Cheers,                          Phone:  250-387-8437
Cy Schubert                        Fax:  250-387-5766
Team Leader, Sun/Alpha Team      Email:  Cy.Schubert~AT~osg.gov.bc.ca
Open Systems Group, CITS
Ministry of Management Services
Province of BC            
                    FreeBSD UNIX:  cy~AT~FreeBSD.org


This archive was generated by hypermail 2.1.5 : Wed Oct 23 2002 - 14:22:02 CEST