From owner-freebsd-current@FreeBSD.ORG  Thu Aug 19 16:33:11 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id DE8EA16A4CE; Thu, 19 Aug 2004 16:33:11 +0000 (GMT)
Received: from tigra.ip.net.ua (tigra.ip.net.ua [82.193.96.10])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id DC0BC43D1D; Thu, 19 Aug 2004 16:33:10 +0000 (GMT)
	(envelope-from ru@ip.net.ua)
Received: from heffalump.ip.net.ua (heffalump.ip.net.ua [82.193.96.213])
	by tigra.ip.net.ua (8.12.11/8.12.11) with ESMTP id i7JGX6fs033089
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Thu, 19 Aug 2004 19:33:07 +0300 (EEST)
	(envelope-from ru@ip.net.ua)
Received: (from ru@localhost)
	by heffalump.ip.net.ua (8.13.1/8.13.1) id i7JGX7AA043590;
	Thu, 19 Aug 2004 19:33:07 +0300 (EEST)
	(envelope-from ru)
Date: Thu, 19 Aug 2004 19:33:07 +0300
From: Ruslan Ermilov <ru@freebsd.org>
To: Andreas Kohn <andreas.kohn@gmx.net>
Message-ID: <20040819163307.GD82175@ip.net.ua>
References: <20040819152456.GE81657@ip.net.ua>
	<1092932213.67807.29.camel@klamath.ankon.de.eu.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="qGV0fN9tzfkG3CxV"
Content-Disposition: inline
In-Reply-To: <1092932213.67807.29.camel@klamath.ankon.de.eu.org>
User-Agent: Mutt/1.5.6i
X-Virus-Scanned: by amavisd-new
cc: Andre Oppermann <andre@freebsd.org>
cc: current@freebsd.org
Subject: Re: More about recent IPFW changes
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Aug 2004 16:33:12 -0000


--qGV0fN9tzfkG3CxV
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Aug 19, 2004 at 06:16:53PM +0200, Andreas Kohn wrote:
> On Thu, 2004-08-19 at 17:24, Ruslan Ermilov wrote:
> > Andre,
> >=20
> > There was also an API change: net.inet.ip.fw.enable
> > is no longer available, the removal wasn't mentioned
> > in your HEADS UP nor in the commit log, and this now
> > breaks /etc/rc.d/ipfw.  What's the replacement for
> > this sysctl, to disable firewall in run-time?
>=20
> I replaced these two lines in rc.d/ipfw with ipfw (enable|disable)
> firewall.
>=20
The "ipfw enable|disable firewall" uses the same non-existing
sysctl:

        } else if (strncmp(*av, "firewall", strlen(*av)) =3D=3D 0) {
                sysctlbyname("net.inet.ip.fw.enable", NULL, 0,
                    &which, sizeof(which));


Cheers,
--=20
Ruslan Ermilov
ru@FreeBSD.org
FreeBSD committer

--qGV0fN9tzfkG3CxV
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)

iD8DBQFBJNZDqRfpzJluFF4RAm/CAJ9vDIVcvOWER+7DKNNAjQSYas80QACeKvNq
XP24/YnkW2Vi2Jbp+QG1n6M=
=8YJa
-----END PGP SIGNATURE-----

--qGV0fN9tzfkG3CxV--