Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Dec 2001 22:15:59 +0100
From:      devet@devet.org (Arjan de Vet)
To:        udo.schweigert@siemens.com, dleal@webvolution.net
Cc:        security@freebsd.org
Subject:   Re: IP Filter: already initialized
Message-ID:  <20011212221559.A11690@adv.devet.org>
In-Reply-To: <20011212210743.GA48220@alaska.cert.siemens.de>
References:  <1008190792.3c17c5484856b@mail.webvolution.net>

next in thread | previous in thread | raw e-mail | index | archive | help
In article <20011212210743.GA48220@alaska.cert.siemens.de> you write:

>From /etc/defaults/rc.conf:
>
>ipfilter_flags="-E"		# should be *empty* when ipf is _not_ a module
>				# (i.e. compiled into the kernel) to
>				# avoid a warning about "already initialized"
>
>So: setting ipfilter_flags="" in your /etc/rc.conf will fix the problem.

Since a few day ipfilter_flags="" is the new default in
/etc/defaults/rc.conf on 4.4-stable (together with lots of other
ipfilter related /etc/rc* cleanups). The whole '-E' had indeed become
obsolete.

Arjan

-- 
Arjan de Vet, Eindhoven, The Netherlands               <devet@devet.org>
URL : http://www.iae.nl/users/devet/            <Arjan.deVet@adv.iae.nl>
Work: http://www.madison-gurkha.com/  (Security, Open Source, Education)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011212221559.A11690>