From owner-freebsd-current Thu Mar 28 08:15:46 1996 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id IAA12468 for current-outgoing; Thu, 28 Mar 1996 08:15:46 -0800 (PST) Received: from skiddaw.elsevier.co.uk (skiddaw.elsevier.co.uk [193.131.222.60]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id IAA12447 for ; Thu, 28 Mar 1996 08:15:33 -0800 (PST) Received: from snowdon.elsevier.co.uk (snowdon.elsevier.co.uk [193.131.197.164]) by skiddaw.elsevier.co.uk (8.6.13/8.6.12) with ESMTP id QAA14305 for ; Thu, 28 Mar 1996 16:13:18 GMT Received: from tees by snowdon with SMTP (PP); Thu, 28 Mar 1996 15:11:54 +0000 Received: (from dpr@localhost) by tees (SMI-8.6/8.6.12) id PAA26261; Thu, 28 Mar 1996 15:18:13 GMT From: Paul Richards Message-Id: <199603281518.PAA26261@tees> Subject: Re: 2.2-960323-SNAP: ipfw problem To: hsu@clinet.fi (Heikki Suonsivu) Date: Thu, 28 Mar 1996 15:18:13 +0000 (GMT) Cc: ec0@s1.GANet.NET, freebsd-current@FreeBSD.org In-Reply-To: <199603271805.UAA08738@cantina.clinet.fi> from "Heikki Suonsivu" at Mar 27, 96 08:05:24 pm X-Mailer: ELM [version 2.4 PL24] Content-Type: text Sender: owner-current@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk In reply to Heikki Suonsivu who said > > Now, GATEWAY is a case where I *can* still log in the machine. Guess what > happens when someone who does not know about ipfw "improvement", or forgets > about it, and installs a new kernel and reboots a remote router, which > happens to be at the other side of the town :-( > > This kind of changes should always be done carefully. Quick change without > thinking may mean hundreds of people falling in a nasty trap. It was well discussed and these problems were raised but at the end of the day the new behaviour is more correct. We *DO* need to make sure it's extremely well documented though. To be honest, if you reboot a remote router with a new kernel then you deserve what you get. -- Paul Richards. Originative Solutions Ltd. (Netcraft Ltd. contractor) Elsevier Science TIS online journal project. Email: p.richards@elsevier.co.uk Phone: 0370 462071 (Mobile), +44 (0)1865 843155