From owner-freebsd-stable@FreeBSD.ORG Tue Apr 3 08:53:40 2007 Return-Path: X-Original-To: freebsd-stable@FreeBSD.ORG Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C5CC216A402 for ; Tue, 3 Apr 2007 08:53:40 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (lurza.secnetix.de [83.120.8.8]) by mx1.freebsd.org (Postfix) with ESMTP id 4379A13C4B9 for ; Tue, 3 Apr 2007 08:53:40 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (xoxqvc@localhost [127.0.0.1]) by lurza.secnetix.de (8.13.4/8.13.4) with ESMTP id l338rXmn050253; Tue, 3 Apr 2007 10:53:39 +0200 (CEST) (envelope-from oliver.fromme@secnetix.de) Received: (from olli@localhost) by lurza.secnetix.de (8.13.4/8.13.1/Submit) id l338rXZD050252; Tue, 3 Apr 2007 10:53:33 +0200 (CEST) (envelope-from olli) Date: Tue, 3 Apr 2007 10:53:33 +0200 (CEST) Message-Id: <200704030853.l338rXZD050252@lurza.secnetix.de> From: Oliver Fromme To: freebsd-stable@FreeBSD.ORG, joao@matik.com.br In-Reply-To: <200704011255.49740.joao@matik.com.br> X-Newsgroups: list.freebsd-stable User-Agent: tin/1.8.2-20060425 ("Shillay") (UNIX) (FreeBSD/4.11-STABLE (i386)) MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.1.2 (lurza.secnetix.de [127.0.0.1]); Tue, 03 Apr 2007 10:53:39 +0200 (CEST) Cc: Subject: Re: ipfw add pipe broken? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-stable@FreeBSD.ORG, joao@matik.com.br List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Apr 2007 08:53:40 -0000 JoaoBR wrote: > On Sunday 01 April 2007 12:04, Mike Tancsa wrote: > > At 10:07 AM 4/1/2007, JoaoBR wrote: > > > it seems I can not add pipes with releng6 sources from the last days > > > > > > ipfw add pipe 1 ip from any to any > > > ipfw: getsockopt(IP_FW_ADD): Invalid argument > > > > > > or any similar add pipe command does not work > > > (sure I have options DUMMYNET in > > > kernel) > > > > > > world and kernel from march 29 works still fine > > > > > > anything changed? > > > > There were a bunch of MFCs. When I try from a kernel today, > > seems the thing happened on saturday > > by all respect to Julians work but with ipfw broken and sunday fucked up ... > > kind of scaring when seeing "I have no time to check, I do it on tuesday" > or "I need to do the userland ipfw too to add some new features, but, not > today.." Well, FreeBSD is mostly a volunteer project, so people work on it when they have time. Admittedly, you're right that any changes should be tested. But in reality it's not always that easy. Some changes are complex so that not all possible things can be tested. And some changes _seem_ trivial and obviously don't need to be tested (especially if a nearly identical change ran for months in -current), but then that might turn out to be a mistake. Errare humanum est. (Translation: shit happens.) > please do it all or don't do it, ipfw is an mature and essential part where we > do not espect such sudden surprises in releng6 to happen First, if you absolutely don't want surprises, then you should run RELENG_6_2, not RELENG_6. If you run RELENG_6, you should be prepared and able to deal with breakages. (Even if it's unusual that RELENG_x breaks, it does happen sometimes. The FreeBSD Handbook chapter "staying stable" contains appropriate warnings.) And second, it's not a big deal to go back to Friday's sources until Julian had time to fix the issue, is it? Best regards Oliver PS: Right now I'm much more concerned with the security issue of the "file" utility. FreeBSD's version of file(1) in the base system seems to be vulnerable to the recently discovered (~ 2 weeks ago) issue, as far as I can tell. -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd 'Instead of asking why a piece of software is using "1970s technology," start asking why software is ignoring 30 years of accumulated wisdom.'