From owner-freebsd-security  Thu Oct 29 02:00:16 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id CAA01163
          for freebsd-security-outgoing; Thu, 29 Oct 1998 02:00:16 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from cheops.anu.edu.au (cheops.anu.edu.au [150.203.224.24])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA01152
          for <freebsd-security@FreeBSD.ORG>; Thu, 29 Oct 1998 02:00:13 -0800 (PST)
          (envelope-from avalon@coombs.anu.edu.au)
Message-Id: <199810291000.CAA01152@hub.freebsd.org>
Received: by cheops.anu.edu.au
	(1.37.109.16/16.2) id AA176265191; Thu, 29 Oct 1998 20:59:51 +1100
From: Darren Reed <avalon@coombs.anu.edu.au>
Subject: Re: IPFW problems...
To: andrew@squiz.co.nz
Date: Thu, 29 Oct 1998 20:59:51 +1100 (EDT)
Cc: opsys@mail.webspan.net, freebsd-security@FreeBSD.ORG
In-Reply-To: <Pine.BSF.4.01.9810292152040.22226-100000@aniwa.sky> from "Andrew McNaughton" at Oct 29, 98 10:19:46 pm
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In some mail from Andrew McNaughton, sie said:
> 
> On Thu, 29 Oct 1998, Open Systems Networking wrote:
> 
> > Im at a loss for this problem I am having with IPFW in 2.2.7-stable.
> > I have a kernel that I built with 2.2.7-RELEASE before cvsuping kernel
> > source to stable. It has firewall support in it and boots fine with a
> > firewall type of open. But EVERY kernel I build from stable wedges the
> > machine, with the following errors:
> 
> > Oct 28 15:56:55 pm330 /kernel: ip_fw_ctl: len=104, want 96
> 
> I had this one when my build world was out of sync with my kernel build.
> I presume there's been a change since the release (dummynet?) which has
> changed the size of the data structure passed from ipfw to the kernel.
> 
> Currently I can't get my 2.2.7 PAO kernel to work with my ipfw
> (2.2.5-RELEASE source cvsup'ed to 2.2.7-RELEASE).  If someone can tell me
> how to cvsup my source to the original 2.2.7-RELEASE rather than the
> latest STABLE then I'd be most obliged.  The data cost of my link is
> significant, and I was hoping to wait till 2.2.8 before buying my next CD
> release.

Just install IP Filter and convert your ruleset :-)

Darren

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message