Firewall enabling confusion.

[Remko Lodder]

kldstat is the program you are looking for (like lsmod)
It can indeed be that the module is loaded with it's default
settings {block all}

Hope this solves your lsmod question, the rest i cannot help you
with since i don't understand ipfw :) {yet}

cheers

--

Kind regards,

Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl Dutch community for helping newcomers on the
hackerscene

mrtg.grunn.org Dutch mirror of MRTG

-----Oorspronkelijk bericht-----
Van: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]Namens Shaun T. Erickson
Verzonden: vrijdag 27 februari 2004 20:40
Aan: freebsd-questions at freebsd.org
Onderwerp: Firewall enabling confusion.


I put 'firewall_enable="YES"' in /etc/rc.conf, in anticipation of
rebuilding my kernel with the following options turned on:

options		IPFIREWALL
options		IPFIREWALL_VERBOSE
options		IPFIREWALL_VERBOSE_LIMIT=100

I rebooted, for unrelated reasons, and now see in the messages file that
ipfw2 has been enabled and, indeed, since I have no rules in place, my
system is cut off from the network.

I haven't yet rebuilt my kernel, so I don't understand why this kicked
in. Did adding that line in rc.conf suck in a kernel module that
obsoletes the need for those kernel options? How do I check (I'd do an
lsmod, on Linux - don't know what the equivalent FreeBSD command is)?
If it is a module, how do I enable logging, as adding
'firewall_logging="YES"' to /etc/rc.conf didn't turn it on, according to
the messages file. Likewise for divert (though I don't currently need it).

Feb 27 14:37:22 peter kernel: ipfw2 initialized, divert disabled,
rule-based forwarding enabled, default to deny, logging disabled

	-ste

_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"