From owner-freebsd-stable Wed Sep 17 19:01:06 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id TAA26663 for stable-outgoing; Wed, 17 Sep 1997 19:01:06 -0700 (PDT) Received: from helium.vapornet.com (root@helium.vapornet.com [208.202.126.112]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA26652 for ; Wed, 17 Sep 1997 19:01:02 -0700 (PDT) Received: from argon.vapornet.com (chicago1-3.ebs.net [207.19.130.67]) by helium.vapornet.com (8.8.7/VaporServer-v3.0+SpamNot) with ESMTP id VAA00504 for ; Wed, 17 Sep 1997 21:01:26 -0500 (CDT) Received: by argon.vapornet.com (8.8.7/VaporClient-1.1) id VAA00693; Wed, 17 Sep 1997 21:01:04 -0500 (CDT) Date: Wed, 17 Sep 1997 21:01:04 -0500 (CDT) Message-Id: <199709180201.VAA00693@argon.vapornet.com> From: John Preisler MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: freebsd-stable@freebsd.org Subject: problem with ipfirewall changes X-Mailer: VM 6.22 under 19.15 XEmacs Lucid Sender: owner-freebsd-stable@freebsd.org X-Loop: FreeBSD.org Precedence: bulk danny 1997/09/14 16:35:27 PDT Modified files: (Branch: RELENG_2_2) etc rc.conf rc.firewall rc.network Log: MFC - firewall initialization cosmetics. Revision Changes Path 1.1.2.20 +4 -2 src/etc/rc.conf 1.6.2.3 +56 -44 src/etc/rc.firewall 1.1.2.10 +32 -5 src/etc/rc.network made world overnight last night. Everything went fine except where rc.network decides whether i'm running ipfirewall in the kernel or loadable module. this clip from dmesg shows that kernel firewall support gets loaded as I configured it, but rc.network forces the module to load anyway. changing root device to sd0a IP packet filtering initialized, divert disabled, logging limited to 50 packets/entry de0: enabling 10baseT port IP packet filtering initialized, divert disabled, logging disabled rfork() call disabled Type Id Off Loadaddr Size Info Rev Module Name MISC 0 0 f634d000 000c f634f018 1 ipfw_mod also rc.i386 also tries to launch moused even though rc.conf says moused="NO" Console message complains of -t being bogus flag -jrp