Date: Mon, 16 Dec 2002 19:41:17 +0200 From: Ruslan Ermilov <ru@FreeBSD.ORG> To: Matthew Dillon <dillon@apollo.backplane.com> Cc: "David O'Brien" <obrien@FreeBSD.ORG>, current@FreeBSD.ORG Subject: Re: ipfw userland breaks again. Message-ID: <20021216174117.GB34320@sunbay.com> In-Reply-To: <200212142209.gBEM9D8p002479@apollo.backplane.com> References: <200212142025.aa99706@salmon.maths.tcd.ie> <200212142038.gBEKcDVv029924@apollo.backplane.com> <20021214204426.GA62058@dragon.nuxi.com> <200212142209.gBEM9D8p002479@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Sat, Dec 14, 2002 at 02:09:13PM -0800, Matthew Dillon wrote: > > : > :On Sat, Dec 14, 2002 at 12:38:13PM -0800, Matthew Dillon wrote: > :> then, as usual, IPFW with the new kernel and > :> old world fails utterly and now the fragging machine can't access the > : > :Hear hear!! I am >< tempted to have /sbin/ipfw moved to src/sys. > > How about something like this (patch enclosed). If there are no > objections I will commit it along with a documentation update, and > maybe also add some RC code give the sysad a chance to ipfw unbreak if > ipfw otherwise fails during the boot sequence. > Matt, How this could be helpful in a remote upgrade scenario that has IPFW ABI incompatibility issues? One alternative approach would be to not compile IPFW into a kernel but rather have it loaded as a module. Then, you install new kernel, edit out ipfw_enable="YES" for the time being, reboot with the new kernel, installworld, edit ipfw_enable="YES" back in, reboot, and you're done. Cheers, -- Ruslan Ermilov Sysadmin and DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE9/hA9Ukv4P6juNwoRAo/xAKCDCB/lLYDSugVFqGMeRM975EL9YwCeI6Op xZT96vtDoq4tIhs0NDOx35A= =LUDh -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021216174117.GB34320>