From owner-freebsd-stable@FreeBSD.ORG Tue Jul 1 06:31:08 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 41F8E37B401 for ; Tue, 1 Jul 2003 06:31:08 -0700 (PDT) Received: from main.gmane.org (main.gmane.org [80.91.224.249]) by mx1.FreeBSD.org (Postfix) with ESMTP id 078CA4407A for ; Tue, 1 Jul 2003 06:31:06 -0700 (PDT) (envelope-from freebsd-stable@m.gmane.org) Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 19XLCb-0004fx-00 for ; Tue, 01 Jul 2003 15:29:45 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-stable@freebsd.org Received: from news by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 19XLCV-0004fP-00 for ; Tue, 01 Jul 2003 15:29:39 +0200 From: Samuel Tardieu Date: Tue, 01 Jul 2003 15:29:33 +0200 Organization: Avian Carrier & Friends Lines: 19 Message-ID: <87ptkutlxe.fsf@inf.enst.fr> References: <874r28odup.fsf@inf.enst.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Complaints-To: usenet@main.gmane.org Mail-Copies-To: sam@rfc1149.net User-Agent: Gnus/5.090007 (Oort Gnus v0.07) XEmacs/21.5 (cauliflower, i386--freebsd) Cancel-Lock: sha1:5S3e7xCojXcuA5uYMbNVl70EjMs= Sender: news cc: sam@rfc1149.net Subject: Re: IPFilter & IPv6 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jul 2003 13:31:08 -0000 >>>>> "Sam" == Samuel Tardieu writes: Sam> With a up-to-date -STABLE kernel and userland, I cannot use IPv6 Sam> rules with IPFilter. Sam> # ipf -6 -f /tmp/t Sam> 1:ioctl(add/insert rule): No such process Sam> Any idea of what could be wrong? Thanks to Artur Pydo (who happened to ask if I had IPFILTER in my kernel configuration file), I found the bug: loading the "ipl" module is not enough to use IPFilter with IPv6. It looks like IPFilter needs to be compiled in-kernel, while dynamic loading of the module works for IPv4. send-pr. Sam -- Samuel Tardieu -- sam@rfc1149.net -- http://www.rfc1149.net/sam