From owner-freebsd-security Wed Dec 12 13:16:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from d13225.upc-d.chello.nl (d13225.upc-d.chello.nl [213.46.13.225]) by hub.freebsd.org (Postfix) with ESMTP id 4222137B416 for ; Wed, 12 Dec 2001 13:16:02 -0800 (PST) Received: from adv.devet.org (adv.devet.org [192.168.1.2]) by d13225.upc-d.chello.nl (Postfix) with ESMTP id 21DE3689D; Wed, 12 Dec 2001 22:16:01 +0100 (CET) Received: by adv.devet.org (Postfix, from userid 100) id C2C4F44B9; Wed, 12 Dec 2001 22:15:59 +0100 (CET) Date: Wed, 12 Dec 2001 22:15:59 +0100 To: udo.schweigert@siemens.com, dleal@webvolution.net Cc: security@freebsd.org Subject: Re: IP Filter: already initialized Message-ID: <20011212221559.A11690@adv.devet.org> References: <1008190792.3c17c5484856b@mail.webvolution.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20011212210743.GA48220@alaska.cert.siemens.de> User-Agent: Mutt/1.3.22.1i X-Newsgroups: list.freebsd.security Organization: Eindhoven, the Netherlands From: devet@devet.org (Arjan de Vet) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org In article <20011212210743.GA48220@alaska.cert.siemens.de> you write: >From /etc/defaults/rc.conf: > >ipfilter_flags="-E" # should be *empty* when ipf is _not_ a module > # (i.e. compiled into the kernel) to > # avoid a warning about "already initialized" > >So: setting ipfilter_flags="" in your /etc/rc.conf will fix the problem. Since a few day ipfilter_flags="" is the new default in /etc/defaults/rc.conf on 4.4-stable (together with lots of other ipfilter related /etc/rc* cleanups). The whole '-E' had indeed become obsolete. Arjan -- Arjan de Vet, Eindhoven, The Netherlands URL : http://www.iae.nl/users/devet/ Work: http://www.madison-gurkha.com/ (Security, Open Source, Education) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message