From owner-freebsd-stable@FreeBSD.ORG Fri Dec 23 13:51:16 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 94B6A16A41F for ; Fri, 23 Dec 2005 13:51:16 +0000 (GMT) (envelope-from SRS0=i9c7bCJ9=2U=metro.cx=fbsd@sonologic.nl) Received: from mx1.sonologic.nl (mx1.sonologic.nl [82.94.245.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id B2E2043D8A for ; Fri, 23 Dec 2005 13:51:06 +0000 (GMT) (envelope-from SRS0=i9c7bCJ9=2U=metro.cx=fbsd@sonologic.nl) Received: from [127.0.0.1] (mx1.sonologic.nl [82.94.245.21]) (authenticated bits=0) by mx1.sonologic.nl (8.13.3/8.13.3) with ESMTP id jBNDp45A033449; Fri, 23 Dec 2005 13:51:05 GMT Message-ID: <43AC00DB.30503@metro.cx> Date: Fri, 23 Dec 2005 14:51:23 +0100 From: Koen Martens Organization: Sonologic User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Melvyn Sopacua References: <43ABCD88.4060300@metro.cx> <200512231436.09593.freebsd.stable@melvyn.homeunix.org> In-Reply-To: <200512231436.09593.freebsd.stable@melvyn.homeunix.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Helo-Milter-Authen: gmc@sonologic.nl, fbsd@metro.cx, mx1 Received-SPF: pass (mx1.sonologic.nl: 82.94.245.21 is authenticated by a trusted mechanism) Cc: freebsd-stable@freebsd.org Subject: Re: ipfilter upgrade issue X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Dec 2005 13:51:16 -0000 Melvyn Sopacua wrote: >On Friday 23 December 2005 11:12, Koen Martens wrote: > > > >>Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. >>The ipfilter implementation in the 6-STABLE kernel errs on the commands >>sent by the 5.4 ipf binary. This can be an issue when you are upgrading >>remotely without serial console and you have IPFILTER_DEFAULT_BLOCK >>enabled: after rebooting in the 6-STABLE kernel no firewall rules will >>be loaded and you cannot access the box anymore to make installworld.. >> >> > >Just wondering - is COMPAT5X in the kernel? > > Well, COMPAT_FREEBSD5 is.. Koen