2.1.102 and ipfwadm

2.1.102 and ipfwadm

[ddx]

hmms what happened to ipfwadm support ? :(

don't like this
cause i just upgraded from the stnd 2.1.99 which crashed on my sun ultra
10
when inserted the scsi/ethernet card

so my problem is :

how do i get back to the 2.1.101 ?  (i updated using cvs)
so where to get a tgz or rpm with it ?

or where to get a patch so i can use ipfwadm on 2.1.102  
or better how do i use that new tool ?

i used to do this :



ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.0.0/24 -D 0.0.0.0/0



but that gives now :

[root@ddx /root]# ipfwadm -F -p deny
ipfwadm: setsockopt failed: Invalid argument
[root@ddx /root]# ipfwadm -F -a m -S 192.168.0.0/24 -D 0.0.0.0/0              
ipfwadm: setsockopt failed: No such file or directory

Re: 2.1.102 and ipfwadm

[ddx]

On Sat, 16 May 1998, David S. Miller wrote:

> 
> You need to install the new ipfwchains utilities from:
> 
> http://www.adelaide.net.au/~rustcorp/ipfwchains/ipfwchains.html
hmms ok i have it
problem is i can't get it working how i want it...
hope som1 here has done it and can say me how to do
i asked on irc on some linux channels
but all guys answered to go back to 2.1.101

i normally did :


ipfwadm -F  -p deny
ipfwadm -F -a m -S 192.168.0.0/24 -D 0.0.0.0/0     


but from now this does not work
so i did try some thing with that new tool

ipchains -A forward  -j DENY
ipchains -I forward -j ACCEPT  -s 192.168.0.0/24 -d 0.0.0.0/0        

what i think would do the same after looking in the docs


[root@ddx /root]# ipchains -L forward
Chain forward (policy ACCEPT):
target     prot opt     source                destination           ports
ACCEPT     all  ------  192.168.0.0/24        anywhere              n/a
DENY       all  ------  anywhere              anywhere              n/a        

but then ping and telnet from an internal box does not work

so i hope som1 here can tell me what i do wrong...



> 
> And I don't want to hear complaints about this, if you use CVS you
but what i heard cvs was the only way to get a working kernel
cose i can't use normal kernel files



> deal with late breaking (no pun intended) developments and changes to
> the code.  What ends up in UltraPenguin will have the updated ipfwadm
> utility from the ipfwchains toolset to complement the ipfw rewrite in
> the kernel.
ok i understand

Re: 2.1.102 and ipfwadm

[David S. Miller]

You need to install the new ipfwchains utilities from:

http://www.adelaide.net.au/~rustcorp/ipfwchains/ipfwchains.html

And I don't want to hear complaints about this, if you use CVS you
deal with late breaking (no pun intended) developments and changes to
the code.  What ends up in UltraPenguin will have the updated ipfwadm
utility from the ipfwchains toolset to complement the ipfw rewrite in
the kernel.

Later,
David S. Miller
davem@dm.cobaltmicro.com