From owner-freebsd-bugs@FreeBSD.ORG Fri Dec 17 10:00:45 2004 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9D06916A4CF for ; Fri, 17 Dec 2004 10:00:45 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5D82A43D45 for ; Fri, 17 Dec 2004 10:00:45 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id iBHA0j5i012409 for ; Fri, 17 Dec 2004 10:00:45 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id iBHA0jRx012408; Fri, 17 Dec 2004 10:00:45 GMT (envelope-from gnats) Resent-Date: Fri, 17 Dec 2004 10:00:45 GMT Resent-Message-Id: <200412171000.iBHA0jRx012408@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Valéry Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 71FBF16A4CE for ; Fri, 17 Dec 2004 09:59:45 +0000 (GMT) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5B70843D2F for ; Fri, 17 Dec 2004 09:59:45 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id iBH9xj7U057331 for ; Fri, 17 Dec 2004 09:59:45 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id iBH9xjLA057330; Fri, 17 Dec 2004 09:59:45 GMT (envelope-from nobody) Message-Id: <200412170959.iBH9xjLA057330@www.freebsd.org> Date: Fri, 17 Dec 2004 09:59:45 GMT From: Valéry To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Subject: misc/75180: INIT -> /etc/rc.d - IPFILTER IPMON conflict X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Dec 2004 10:00:45 -0000 >Number: 75180 >Category: misc >Synopsis: INIT -> /etc/rc.d - IPFILTER IPMON conflict >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Dec 17 10:00:45 GMT 2004 >Closed-Date: >Last-Modified: >Originator: Valéry >Release: FreeBSD 5.2.1-RELEASE - non generic knl >Organization: vslash >Environment: i386 - non generic kernel >Description: We noticed a conflict/contradiction at boot sequence btw ipfilter & ipmon script in /etc/rc.d : ipfilter : LINE08 : # REQUIRE root beforenetlkm mountcritlocal ipmon ipmon : LINE35 - if ! sysctl net.inet.ipf.fr_pass >/dev/null 2>&1; then This way, ipmon don't never start ; i don't found any comment about net.inet.ipf.fr_class sysctl statement, but when ipfilter is loaded, values are 514 or 513. I don't know why ipmon script don't simply check net.inet.ipf.fr_running. Perhaps a misunderstanding on my side ? The fact is that ipmon don't start this way. Thanks and best regards to the community. >How-To-Repeat: rc.conf : enabling ipfilter && ipmon with their default flags values. >Fix: if ipmon could start after ipfilter, just swap the REQUIRE fields btw ipmon & ipfilter to have ipmon starting AFTER ipfilter : /etc/rc.d/ipmon : # REQUIRE mountcritlocal hostname sysctl cleanvar ipfilter /etc/rc.d/ipfilter : # REQUIRE: root beforenetlkm mountcritlocal >Release-Note: >Audit-Trail: >Unformatted: