From owner-freebsd-net  Sun Mar  2 13:33:25 2003
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 05E0F37B405
	for <freebsd-net@FreeBSD.ORG>; Sun,  2 Mar 2003 13:33:24 -0800 (PST)
Received: from nic-naa.net (216-220-241-233.midmaine.com [216.220.241.233])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 06F8243FB1
	for <freebsd-net@FreeBSD.ORG>; Sun,  2 Mar 2003 13:33:22 -0800 (PST)
	(envelope-from brunner@nic-naa.net)
Received: from nic-naa.net (localhost.nic-naa.net [127.0.0.1])
	by nic-naa.net (8.12.7/8.12.6) with ESMTP id h22LVgtY076746
	for <freebsd-net@FreeBSD.ORG>; Sun, 2 Mar 2003 16:31:43 -0500 (EST)
	(envelope-from brunner@nic-naa.net)
Message-Id: <200303022131.h22LVgtY076746@nic-naa.net>
To: freebsd-net@FreeBSD.ORG
Subject: IPFIREWALL, /dev/ipl and friends
Date: Sun, 02 Mar 2003 16:31:42 -0500
From: Eric Brunner-Williams in Portland Maine <brunner@nic-naa.net>
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

Hi,

What is the mechanism in 5.0 for creating /dev/{ipauth,ipl,ipstate}?

MAKEDEV isn't in /dev (via buildworld/installworld)
MAKEDEV fails to create /dev/ipl.
mknod (from MAKEDEV) fails to create /dev/ipl.

I'm behind on reading -CURRENT, and -net (and -ipf), and pointers
would be appreciated.

Boxen are iXsystems, 2 CPU, 2 NIC (and very nice)

Eric

% diff WABANAKI GENERIC
25c25
< ident         WABANAKI
---
> ident         GENERIC
68,79d67
< # Firewall
< options               IPFIREWALL              #firewall
< options               IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
< options               IPFIREWALL_FORWARD      #enable transparent proxy support
< options               IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
< options               IPFIREWALL_DEFAULT_TO_ACCEPT    #use ipf to close, not open
< 
< # Do not decrement the ttl, hide firewall from traceroute class tools
< options         IPSTEALTH               #support for stealth forwarding
< 
1,82c69,70
< options       SMP                     # Symmetric MultiProcessor Kernel
< options       APIC_IO                 # Symmetric (APIC) I/O


TiA,
Eric

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message