Date: Sun, 12 Oct 2025 10:15:30 +0200 From: A FreeBSD User <freebsd@walstatt-de.de> To: Ronald Klop <ronald-lists@klop.ws> Cc: FreeBSD CURRENT <freebsd-current@freebsd.org> Subject: Re: ipfw: ipfw: Adding record failed: Inappropriate ioctl for device Message-ID: <20251012101440.74d9173a@thor.sb211.local> In-Reply-To: <1720635174.15495.1760209498568@localhost> References: <20251011155130.47db5448@thor.sb211.local> <1720635174.15495.1760209498568@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_/TxO1I73rxUMkkvPm7X4zwAd Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Am Tage des Herren Sat, 11 Oct 2025 21:04:58 +0200 (CEST) Ronald Klop <ronald-lists@klop.ws> schrieb: > Hi, >=20 > Are you sure the /sbin/ipfw binary is also from 15-STABLE? >=20 > Regards, > Ronald Yes. The whole system is rebuilt regularily (make world kernel so to speak). I d= o not risc getting into phenomena based upon kernel/world out of phase anymore - at least I be= lieve/hope so. >=20 >=20 > Van: A FreeBSD User <freebsd@walstatt-de.de> > Datum: 11 oktober 2025 15:52 > Aan: FreeBSD CURRENT <freebsd-current@freebsd.org> > Onderwerp: ipfw: ipfw: Adding record failed: Inappropriate ioctl for devi= ce >=20 > >=20 > >=20 > >=20 > > Hello, > >=20 > > running a small home brewn firewall appliance based upon FreeBSD 14-ST= ABLE and IPFW, I > > switched the base to 15-STABLE (FreeBSD 15.0-STABLE #5 n280665-6eb4708a= 84d7: Sat Oct 11 > > 09:08:00 CEST 2025 amd64). > >=20 > > Now I face a serious issue with formerly flawless running skripts filli= ng ipfw tables and > > the readynes of the system after a reboot. > >=20 > > tables: > > creating some named tables. > > Having a list of IPv4 and IPv6 addresses that needed to be blocked, lik= e VoIP Blacklist > > with over 35k lines. Each line (IPv4) is=20 > >=20 > > X.X.X.X/CIDR > >=20 > > Shell is /bin/sh. > >=20 > > Reading the file and filling the table like shown below; > > tbl_block=3Dfoo > >=20 > > #/usr/bin/env sh > > ipfw table $tbl_block create type addr or-flush > > while read -r line > > do ipfw table $tbl_block atomic add $line > > done < /some/path/to/block_file.txt > >=20 > > The block_file.txt looks like > >=20 > > [...] > > 45.143.220.228/32 > > 68.64.211.117/32 > > 113.141.70.204/32 > > 77.247.110.245/32 > > 103.211.36.18/32 > > 156.96.63.238/32 > > 185.53.88.2/32 > > 185.53.88.14/32 > > 52.8.201.128/32 > > 113.141.70.184/32 > > 115.236.54.2/32 > > 50.17.48.216/32 > > 77.247.108.138/32 > > 77.247.110.216/32 > > 171.76.62.142/32 > > 77.247.110.227/32 > > 62.4.15.163/32 > > 158.69.242.200/32 > > 185.53.88.129/32 > > 102.165.39.82/32 > > 103.231.139.130/32 > > 69.142.172.14/32 > > 148.76.71.148/32 > > 82.70.244.121/32 > > 77.247.109.72/32 > > 52.41.52.34/32 > > [...] > >=20 > > While running the skript, each time an address is picked up and inserte= d to the table, I > > see this on the console: > >=20 > > [...] > > added(reverted): 45.143.220.228/32 0 > > ipfw: Adding record failed: Inappropriate ioctl for device > > added(reverted): 68.64.211.117/32 0 > > ipfw: Adding record failed: Inappropriate ioctl for device > > added(reverted): 113.141.70.204/32 0 > > ipfw: Adding record failed: Inappropriate ioctl for device > > added(reverted): 77.247.110.245/32 0 > > ipfw: Adding record failed: Inappropriate ioctl for device > >=20 > > I never saw this happen on 14-STABLE with the very same scripts. What i= s the cause of this > > ioctl issue? > >=20 > > Thanks and kind regards, > >=20 > > Oliver > >=20 > >=20 > >=20 > >=20 > >=20 > >=20 > > --=20 > >=20 > > A FreeBSD user > >=20 > >=20 > >=20 > >=20 > >=20 > >=20 > > =20 --=20 A FreeBSD user --Sig_/TxO1I73rxUMkkvPm7X4zwAd Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRQheDybVktG5eW/1Kxzvs8OqokrwUCaOtjvQAKCRCxzvs8Oqok r/sdAQCoXQfhtgNRtFFRDAjjLAY3vFsRHZ0ZTOn8u9VTwWidQwEAjaHDvfrQkOk7 VXTs1Wx2/Ctbe5q3Xx1Ikyj6DMcT4A8= =ejpQ -----END PGP SIGNATURE----- --Sig_/TxO1I73rxUMkkvPm7X4zwAd--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20251012101440.74d9173a>