From owner-freebsd-questions Mon Sep 16 11:41:34 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 08B3A37B400; Mon, 16 Sep 2002 11:41:33 -0700 (PDT) Received: from quadric.isometry.net (pc3-oxfd1-3-cust229.oxf.cable.ntl.com [213.107.68.229]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9885643E42; Mon, 16 Sep 2002 11:41:32 -0700 (PDT) (envelope-from freebsd@lineone.net) Received: from ishadow (ishadow [192.168.108.2]) by quadric.isometry.net (Postfix) with ESMTP id 5D33E425; Mon, 16 Sep 2002 18:41:30 +0000 (UTC) From: "Robin Breathe" To: Cc: Subject: Problems with ipfilter 3.4.29 under -STABLE (post 31/08/2002) Date: Mon, 16 Sep 2002 19:41:31 +0100 Message-ID: <000201c25db0$acfd64b0$026ca8c0@ishadow> X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4024 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi all, I'm interested to know if anyone is successfully running ipf/ipnat under -STABLE from after the merge on the 31st of August (http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/ipfilter/). I have found that my existing rulesets fail with the new code. ipf blocks everything, and ipnat doesn't do NAT. My rules are at http://isometry.net/freebsd/ipfilter/, and they've worked flawlessly with previous versions of ipfilter, in particular 3.4.27 from 4.6.2-RELEASE to which I have reverted. I am making, and installing the base system and kernel using the makefile from http://www.freebsddiary.org/samples/makefile.for.build.world which has also always worked flawlessly for me. I am trying to work out whether the problem lies with the recent merge of ipfilter 3.4.29, or with my config. And from all the testing I've been able to do, the problem seems to lie with ipfilter. Other people's experiences with the new code would be greatly appreciated. -- Robin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message