Date: Wed, 14 Jul 2010 02:10:10 GMT From: candy-sendpr@kgc.co.jp To: freebsd-ipfw@FreeBSD.org Subject: Re: conf/148137: [ipfw] call order of natd and ipfw startup scripts Message-ID: <201007140210.o6E2AAat000570@freefall.freebsd.org>
index | next in thread | raw e-mail
The following reply was made to PR conf/148137; it has been noted by GNATS. From: candy-sendpr@kgc.co.jp To: bug-followup@FreeBSD.org, vnovy@vnovy.ne, freebsd-ipfw@FreeBSD.org Cc: candy-sendpr@kgc.co.jp Subject: Re: conf/148137: [ipfw] call order of natd and ipfw startup scripts Date: Wed, 14 Jul 2010 10:41:57 +0900 (JST) Fix: Just copy 8.0-RELEASE version /etc/rc.d/ipfw script to your 8.1 box :-) It seems /etc/rc.d/ipfw 1.21.2.2's bug. <URL:http://www.jp.freebsd.org/cgi/cvsweb.cgi/src/etc/rc.d/ipfw.diff?r1=text&tr1=1.21&r2=text&tr2=1.21.2.2>; It moved `/etc/rc.d/natd quietstart' sequence from ipfw_start() to ipfw_poststart(). Natd(8) must be started before ipfw(8) rules are proceeded. Should be in ipfw_prestart() or ipfw_start(). > From 8.0-RELEASE ipfw startup script doesn't call natd startup script. > Also there is no information about call order of ipfw a natd startup > script. On my system ipfw is called before natd. If ipdivert module is > not loaded using loader.conf, natd loads it, but ipfw running before fail > to install divert rules. KANDA Toshihiro <candy-sendpr@kgc.co.jp>help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201007140210.o6E2AAat000570>