Date: Fri, 13 Aug 2004 19:19:02 +0000 (UTC) From: Michael Handler <handler@grendel.net> To: freebsd-stable@freebsd.org Subject: Re: problem with ipfilter and todays -stable Message-ID: <slrnchq51r.1ta5.handler@monster.grendel.net> References: <411D03EC.1020900@gmx.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2004-08-13, Bernhard Valenti <bernhard.valenti@gmx.net> wrote:
> i just updated from 4.8 to 4.10-stable(from today). i noticed that i
> can't ping the machine. [...]
I just did the same upgrade last night, and am experiencing similar
troubles. ("block in quick log on dc0" isn't actually blocking
anything.) Someone on freebsd-net just noticed this as well:
http://lists.freebsd.org/pipermail/freebsd-net/2004-August/004675.html
Darren Reed MFCed IPFilter 3.4.35 in early July, and I don't think
that ipfilter was updated completely in both of the relevant places
(src/contrib/ipfilter and src/sys/contrib/ipfilter). If you diff
the files that exist in both locations, there are some troubling
differences, especially the missing member of the qif structure in
ip_compat.h, etc.
I'm seeing the same problem that the freebsd-net poster did:
root@lair:~# ipf -V
ipf: IP Filter: v3.4.31 (336)
Kernel: IP Filter: v3.4.35
That's with a fresh checkout of RELENG_4, and an empty /usr/obj.
I've sent an error report to Darren Reed.
--
michael handler
washington, dc
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?slrnchq51r.1ta5.handler>