Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Oct 2005 08:56:52 -0400
From:      John Fitzgerald <jjfitzgerald@gmail.com>
To:        claco@chrislaco.com
Cc:        freebsd-security@freebsd.org, Krzysztof Stryjek <wtp@wtp3.org>
Subject:   Re: ipf stopped working on 5.3
Message-ID:  <5e49673f0510260556m1471c5bbme68d9b86681cf1ae@mail.gmail.com>
In-Reply-To: <435F7A98.9010800@chrislaco.com>
References:  <5e49673f0510251032w38312bb7kb082b15d97d00082@mail.gmail.com> <20051026071948.GI52933@fw.wtp3.org> <5e49673f0510260525m796f8b06g2a9176e4858c1708@mail.gmail.com> <435F7A98.9010800@chrislaco.com>

next in thread | previous in thread | raw e-mail | index | archive | help

It doesn't work on boot or after ipf -D; ipf -E -f /etc/ipf.rules. My
rc.conf specifies the rules file so it's the same thing and I don't have any
other scripts that could be interfering with it (that I know of).

The only thing they installed that might have affected it (?) is "cronolog".
I've never used it before and it just appears to be a log parser. Other than
that, it's just a web box so I have openssl, mod_ssl, mod_perl, mason, php,
mysql, and apache installed with nothing else to speak of. I don't like a
lot of miscellany on my servers so it's hard to say that it might be a
conflict with something that was put on there.

-JJ

On 10/26/05, Christopher H. Laco <claco@chrislaco.com> wrote:
>
> John Fitzgerald wrote:
> > Yeah, options INET6 is already in there (by default). It's curious that
> it
> > would stop working on one of my servers, yet remain functional on the
> other.
> >
> > -JJ
> >
>
> I missed most of this thread, so I'm sure this has been covered.
>
> Does it just not work after boot, but works after issuing ipf -Fav -f
> /etc/ipf.rules?
>
> I spent a couple of days trying to figure out why my ipf rules were
> loading on boot...and the it turned out to be the fact that I put bash
> in my roots .cshrc file...it was short cirtuiting the startup scripts
> for ipf...
>
> -=Chris
>
>
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5e49673f0510260556m1471c5bbme68d9b86681cf1ae>