From owner-freebsd-current Mon Nov 29 19:29: 9 1999 Delivered-To: freebsd-current@freebsd.org Received: from dnvrpop1.dnvr.uswest.net (dnvrpop1.dnvr.uswest.net [206.196.128.3]) by hub.freebsd.org (Postfix) with SMTP id 974DE155D7 for ; Mon, 29 Nov 1999 19:28:45 -0800 (PST) (envelope-from Davec@unforgettable.com) Received: (qmail 7113 invoked by alias); 30 Nov 1999 03:28:42 -0000 Delivered-To: fixup-current@FreeBSD.ORG@fixme Received: (qmail 7097 invoked by uid 0); 30 Nov 1999 03:28:42 -0000 Received: from odsl228.dnvr.uswest.net (HELO Amber.XtremeDev.com) (209.181.79.228) by dnvrpop1.dnvr.uswest.net with SMTP; 30 Nov 1999 03:28:42 -0000 From: Davec Reply-To: Davec@unforgettable.com To: "O'Shaughnessy Evans" , ipfilter@coombs.anu.edu.au, current@FreeBSD.ORG Subject: Re: IP Filter 3.3.3 in FreeBSD -CURRENT [LONG] Date: Mon, 29 Nov 1999 20:20:11 -0700 X-Mailer: KMail [version 1.0.28] Content-Type: text/plain References: <99112814445100.78810@Amber.XtremeDev.com> <19991130032407.A68259@demos.su> <19991129172520.M6038@zero.wumpus.org> In-Reply-To: <19991129172520.M6038@zero.wumpus.org> MIME-Version: 1.0 Message-Id: <99112920284300.76175@Amber.XtremeDev.com> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 29 Nov 1999, O'Shaughnessy Evans wrote: > "Mikhail A. Sokolov" wrote: > > No, it can't. He was refering to ipf -V; I managed to reproduce the > > behaviour several days ago, but since I remade the devices it's ok in > > my case, but in his. Again, no other rules/whatever is being used in > > the test, just ipf -V. > > Makes sense. I get the same message, BTW, on my Solaris 7 box when the > ipf kernel module isn't loaded and I run "ipf -V". > > -- > O'Shaughnessy Evans But I'm not using a loadable kernel module. I compiled IPFilter in my kernel from the FreeBSD source tree with: options IPFILTER options IPFILTER_LOG #options IPFILTER_LKM And bootup did show: Nov 28 20:02:34 /kernel: IP Filter: initialized. Default = pass all, Logging = enabled Nov 28 20:02:34 /kernel: IP Filter: v3.3.3 Unfortunately I've only been using FreeBSD for about a year and a half now (excellent platform for program development btw) so I still do not know all the internal workings. But how would I know, aside from /var/log/messages, that IPFilter is loaded and running when not existing as a lkm? -- Davec@unforgettable.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message