From owner-freebsd-stable Mon Aug 17 17:51:37 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA02608 for freebsd-stable-outgoing; Mon, 17 Aug 1998 17:51:37 -0700 (PDT) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from labinfo.iet.unipi.it (labinfo.iet.unipi.it [131.114.9.5]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id RAA02598 for ; Mon, 17 Aug 1998 17:51:29 -0700 (PDT) (envelope-from luigi@labinfo.iet.unipi.it) Received: from localhost (luigi@localhost) by labinfo.iet.unipi.it (8.6.5/8.6.5) id BAA24079; Tue, 18 Aug 1998 01:04:58 +0200 From: Luigi Rizzo Message-Id: <199808172304.BAA24079@labinfo.iet.unipi.it> Subject: Re: Increasing IP_FW_MAX_PORTS seems to fail To: Jeff@Wagsky.com (Jeff Kletsky) Date: Tue, 18 Aug 1998 01:04:58 +0200 (MET DST) Cc: freebsd-stable@FreeBSD.ORG In-Reply-To: from "Jeff Kletsky" at Aug 17, 98 03:45:30 pm X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > In order to pass H.323 conferencing, we need to increase the number of > ports explicitly called out in our ipfw configuration. Currently running > -STABLE with a last CVSup of 980815. > > After editing /usr/src/sys/netinet/ip_fw.h to reflect the increased number > of ports (16 attempted from original 10) and examining the .depend files > the following were 'make; make install'-ed: not the way to go... just duplicate rules instead: ipfw add accept udp from X p1,p2,..,p9 to ... ipfw add accept udp from X p10,p11,..,p16 to ... > Upon reboot, ipfw does not function, with the error message: > > ip_fw_ctl: len=104, want 116 > > (somewhat confusing since ip_fw.h says: > * Warning: setsockopt() will fail if sizeof(struct ip_fw) > MLEN (108) are you using dummynet by chance ? This would add a field to the mbuf header and reduce the usable slace (MLEN) to 104 ... and the number of usable ports per rule with dummynet is even lower since i need more room in the firewall structs for other fields. cheers luigi -----------------------------+-------------------------------------- Luigi Rizzo | Dip. di Ingegneria dell'Informazione email: luigi@iet.unipi.it | Universita' di Pisa tel: +39-50-568533 | via Diotisalvi 2, 56126 PISA (Italy) fax: +39-50-568522 | http://www.iet.unipi.it/~luigi/ _____________________________|______________________________________ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message