I have installed the above and configured it, (Just with a very simple config to disallow almost everything), but, when I run '/sbin/init.d/firewall start' I get the message, Starting Firewall Initialization: Warning: you must enable IP forwarding for packets to be forwarded at all: Use `echo 1 > /proc/sys/net/ipv4/ip_forward' I have already enabled IP Forwarding in yast and re-started but I try it anyway - it accepts it but when I then run 'firewall start' again it says the same thing. Any ideas?? Regards Andy Bennett andy@itosn.com
Hi, have you enabled ipforwarding in the kernel? mike On 14 Jan 00, at 16:35, andy wrote:
I have installed the above and configured it, (Just with a very simple config to disallow almost everything), but, when I run '/sbin/init.d/firewall start' I get the message,
Starting Firewall Initialization: Warning: you must enable IP forwarding for packets to be forwarded at all:
Use `echo 1 > /proc/sys/net/ipv4/ip_forward'
I have already enabled IP Forwarding in yast and re-started but I try it anyway - it accepts it but when I then run 'firewall start' again it says the same thing.
Any ideas??
Regards Andy Bennett andy@itosn.com
On Fri, 14 Jan 2000, andy wrote:
I have installed the above and configured it, (Just with a very simple config to disallow almost everything), but, when I run '/sbin/init.d/firewall start' I get the message,
Starting Firewall Initialization: Warning: you must enable IP forwarding for packets to be forwarded at all:
Use `echo 1 > /proc/sys/net/ipv4/ip_forward'
I have already enabled IP Forwarding in yast and re-started but I try it anyway - it accepts it but when I then run 'firewall start' again it says the same thing.
There might be at least two problems, both have been discussed on this list. Have a look at <http://lists.suse.com/archives/>. | Date: Sun, 19 Dec 1999 13:39:23 +0100 (MET) | From: Marc Heuse <marc@suse.de> | Subject: [suse-security] msq bei SuSE6.3 (fwd) | | please, everyone who uses or wants to use the SuSE firewall script, | please update to at least v1.4, which rpm is available on the ftp | site. (if you feel like beta testing, v1.5 is available as .tar.gz | file from http://www.suse.de/~marc) [...] | Date: Sat, 25 Sep 1999 19:32:16 +0200 | From: Juergen Braukmann <juergen.braukmann@ruhr-west.de> | Subject: Re: [suse-security] masquerading & firewalling | [...] | Make sure, to have the setting for masquerade in rc.config! i.e., set "IP_FORWARD=yes" in "/etc/rc.config" I am sure, you'll find these and other emails on the same toppic. Read them thoroughly.
participants (3)
-
andy
-
Mark Lutz
-
Thomas Michael Wanka