Issues Setting Up IPFW

[Sepherosa Ziehau]

On Tue, Dec 25, 2012 at 9:25 PM, Mark McNeely <m4x_sterling at hotmail.com> wrote:
> Hi,
>
> I am trying to setup a simple firewall on DragonflyBSD, but I am having
> issues with it.  When I type:
>>firewall_enable="YES"
>>firewall_type="/usr/local/etc/ipfw.conf"
>
> into my rc.conf, the system will not boot.  The last message I get is
> something like:
>
>>Configuring syscons.  Blanktime.
>
> And then nothing else happens.  At first, I thought there was an issue with
> the rules in my ipfw.conf file.  However, when I comment out the
> firewall_type line and leave just the firewall_enable="YES" line it still
> won't boot.

You will need to
kldload ipfw

IPFW is not compiled into GENERIC or X86_64_GENERIC by default.

>
> I have also tried loading ipfw at runtime, by typing:
>>ipfw enable firewall

You don't need to explicitly enable it.  It is enabled by default once
you load the ipfw.ko

Best Regards,
sephe

>>ipfw add 00010 allow all from any to any via lo0
>
> but then I get an error message:
>>ipfw: getsockopt(IP_FW_ADD): Protocol not available
>
> So, naturally, I am quite lost.  I have pared down my ipfw.conf to
> barebones, and still can't seem to get it to work.  I will attach it, and
> hopefully, someone can point me in the right direction on how to set this up
> properly.
>
> Needless to say, I am a firewall noob.  But, if anyone can offer some help,
> I would greatly appreciate it.
>
> Thanks and Merry Christmas,
> Mark



--
Tomorrow Will Never Die