From owner-freebsd-pf@FreeBSD.ORG Mon Oct 24 15:02:38 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7082E16A41F for ; Mon, 24 Oct 2005 15:02:38 +0000 (GMT) (envelope-from max@love2party.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.187]) by mx1.FreeBSD.org (Postfix) with ESMTP id CCAE543D45 for ; Mon, 24 Oct 2005 15:02:36 +0000 (GMT) (envelope-from max@love2party.net) Received: from p54A3CE0A.dip.t-dialin.net [84.163.206.10] (helo=donor.laier.local) by mrelayeu.kundenserver.de with ESMTP (Nemesis), id 0ML25U-1EU3qL11CF-0005ip; Mon, 24 Oct 2005 17:02:33 +0200 From: Max Laier To: Roger Grosswiler Date: Mon, 24 Oct 2005 17:02:27 +0200 User-Agent: KMail/1.8.2 References: <1130097244.5844.4.camel@niobe> <200510232207.53352.max@love2party.net> <1130160566.699.2.camel@niobe> In-Reply-To: <1130160566.699.2.camel@niobe> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1176758.KXNgfrnXcG"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200510241702.39502.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de login:61c499deaeeba3ba5be80f48ecc83056 Cc: freebsd-pf@freebsd.org Subject: Re: pf not loading X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Oct 2005 15:02:38 -0000 --nextPart1176758.KXNgfrnXcG Content-Type: text/plain; charset="iso-8859-6" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Monday 24 October 2005 15:29, Roger Grosswiler wrote: > Hello... > > Am Sonntag, den 23.10.2005, 22:07 +0200 schrieb Max Laier: > > On Sunday 23 October 2005 21:54, Roger Grosswiler wrote: > > > i installed 6.0 RC1 and filled pf_enable=3D"YES" as i did in 5.4 > > > > > > But, no pf is loaded while startup. no /dev/pf is there. i can kldload > > > pf, but then the ruleset won't be loaded too. even pfctl -f > > > /etc/pf.conf does not change this. > > > > This is not very precise. What happens when you pfctl -f /etc/pf.conf = ?=20 > > Are you sure you can kldload pf? > > yes, i am. i even saw, that pf.conf has been loaded. pf -sA doesn't show > anymore filters & rules, i have to select pfctl -s all - then i see the > rules. If you meant to say "pfctl -sA", that shows Anchors not "filters & rules". = =20 "pfctl -s rules" is what you want. > > > does somebody have the same? or does somebody know how to correct? > > > > Are you, by chance, using a custom kernel without INET6? In that case > > trying to kldload pf will error out on the console. To build the pf > > module without INET6 you need to define NO_INET6 in make.conf while > > building pf.ko. Also make sure you have bpf in your kernel. > > I tried also using ipv6 support, but still no hope, pf is not loaded on > bootup. After booting try (as root): # /etc/rc.d/pf rcvar # /etc/rc.d/pf status # /etc/rc.d/pf start and watch the console (#dmesg -a) for error messages. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart1176758.KXNgfrnXcG Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQBDXPePXyyEoT62BG0RAhERAJ9szQCRg3uF2GjTg0gZbcm138I6mgCeOEkL 4ZYaD9blWRlNwDEZFs1mkO8= =D6wB -----END PGP SIGNATURE----- --nextPart1176758.KXNgfrnXcG--