From owner-freebsd-questions@FreeBSD.ORG Tue Nov 6 15:15:52 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6121D16A46D for ; Tue, 6 Nov 2007 15:15:52 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from be-well.ilk.org (dsl092-078-145.bos1.dsl.speakeasy.net [66.92.78.145]) by mx1.freebsd.org (Postfix) with ESMTP id 1EC6213C4CA for ; Tue, 6 Nov 2007 15:15:52 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: by be-well.ilk.org (Postfix, from userid 1147) id 534B728459; Tue, 6 Nov 2007 10:15:42 -0500 (EST) To: Eric F Crist Date: Tue, 6 Nov 2007 07:15:11 -0400 References: <473009B2.40406@yandex.ru> <4C884976-8734-4112-8520-2E30893C0BE3@secure-computing.net> <47306CD0.7030301@yandex.ru> <0F869E5F-EF2C-468A-BF14-960E59159F32@secure-computing.net> From: Lowell Gilbert In-Reply-To: <0F869E5F-EF2C-468A-BF14-960E59159F32@secure-computing.net> (Eric F. Crist's message of "Tue\, 6 Nov 2007 08\:15\:00 -0600") Message-ID: <441wb3l80x.fsf@be-well.ilk.org> User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.99 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: User Questions Subject: Re: IPFW/Divert problem... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2007 15:15:52 -0000 Eric F Crist writes: > On Nov 6, 2007, at 7:32 AM, Andrey V. Elsukov wrote: > >> Eric F Crist wrote: >>> firewall_enable="YES" >>> firewall_script="/etc/ipfw.sh" >>> FWIW, ipfw.sh ONLY has count rules it it. There isn't any NAT/etc >>> going on here. Also, IPFW was compiled with DEFAULT TO ACCEPT, >>> since I'm not really using it for anything other than accounting. >> >> In the your /etc/ipfw.sh script you should use "-f" flag when you run >> ipfw flush command. > > > I am, but that has nothing to do with my problem. My problem is that, > during system boot, I'm asked the following question: > > Loading divert daemons Are you sure? [yn]: > > The system sits there indefinitely until the question is answered. I > need this to go away. I can't find anything that would be causing that. Try using rcorder to determine the order for the startup scripts, then run them by hand one at a time. You may need to do this by booting into single-user mode to avoid the scripts being run automatically.