From owner-freebsd-stable  Mon Aug 17 18:03:49 1998
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id SAA04204
          for freebsd-stable-outgoing; Mon, 17 Aug 1998 18:03:49 -0700 (PDT)
          (envelope-from owner-freebsd-stable@FreeBSD.ORG)
Received: from nash.pr.mcs.net (nash.pr.mcs.net [204.95.47.72])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA04193
          for <freebsd-stable@FreeBSD.ORG>; Mon, 17 Aug 1998 18:03:45 -0700 (PDT)
          (envelope-from alex@nash.pr.mcs.net)
Received: (from alex@localhost)
	by nash.pr.mcs.net (8.8.8/8.8.7) id UAA29594;
	Mon, 17 Aug 1998 20:02:33 -0500 (CDT)
	(envelope-from alex)
Message-ID: <19980817200233.R169@pr.mcs.net>
Date: Mon, 17 Aug 1998 20:02:33 -0500
From: Alex Nash <nash@mcs.net>
To: Jeff Kletsky <Jeff@Wagsky.com>, freebsd-stable@FreeBSD.ORG
Subject: Re: Increasing IP_FW_MAX_PORTS seems to fail
References: <l03110702b1fe4679e025@[192.168.6.3]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93.2i
In-Reply-To: <l03110702b1fe4679e025@[192.168.6.3]>; from Jeff Kletsky on Mon, Aug 17, 1998 at 03:45:49PM -0700
X-Operating-System: FreeBSD 3.0-CURRENT i386
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Mon, Aug 17, 1998 at 03:45:49PM -0700, Jeff Kletsky wrote:
> After editing /usr/src/sys/netinet/ip_fw.h to reflect the increased number
> of ports (16 attempted from original 10) and examining the .depend files
> the following were 'make; make install'-ed:
> 
> /usr/src/sbin/ipfw
> /usr/src/lkm/ipfw
> (full kernel build and install)
> 
> Upon reboot, ipfw does not function, with the error message:
> 
> ip_fw_ctl: len=104, want 116
> 
> (somewhat confusing since ip_fw.h says:
> * Warning: setsockopt() will fail if sizeof(struct ip_fw) > MLEN (108)
[...]
> What am I missing?

The ipfw binary you built includes /usr/include/netinet/ip_fw.h, I
suspect your changes haven't made it there.

You should probably heed the warning about setsockopt() failing for
sizeof(struct ip_fw) > 108 bytes -- this restriction is removed in
-current but not in -stable.

Consider using multiple rules instead.

Alex

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message