From owner-freebsd-net@FreeBSD.ORG  Wed Nov 10 15:46:27 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7B2A016A4CE
	for <freebsd-net@freebsd.org>; Wed, 10 Nov 2004 15:46:27 +0000 (GMT)
Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.199])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 249AF43D2F
	for <freebsd-net@freebsd.org>; Wed, 10 Nov 2004 15:46:27 +0000 (GMT)
	(envelope-from fehwalker@gmail.com)
Received: by rproxy.gmail.com with SMTP id a36so195702rnf
        for <freebsd-net@freebsd.org>; Wed, 10 Nov 2004 07:46:26 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding;
	b=El0TzUs9Ap2op9PuiKZy0Stf0wL2EFMnvcjUCbxi/sjlB6YQBLOJPDS/klzDqEmbhOPyOIOCA1Jf5vxb+ro5LTqk01RCmrRNvKnoveVxdVduqHrvJUCh7gA+oXPKV2emeP9cNy2vGNEL0CiqGMs7s92wQSy9GQesu50A+/uUIoE=
Received: by 10.38.82.80 with SMTP id f80mr90377rnb;
        Wed, 10 Nov 2004 07:46:26 -0800 (PST)
Received: by 10.38.74.74 with HTTP; Wed, 10 Nov 2004 07:46:26 -0800 (PST)
Message-ID: <35de0c30041110074662654d9b@mail.gmail.com>
Date: Wed, 10 Nov 2004 10:46:26 -0500
From: Bryan Fullerton <fehwalker@gmail.com>
To: freebsd-net@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: ipfw jail and debug.mpsafenet
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Bryan Fullerton <fehwalker@gmail.com>
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Nov 2004 15:46:27 -0000

I've upgraded my jail box to 5.3, and was thinking of updating ipfw
rules to use the jail rule option. Both the ipfw man page and the 5.3
Errata indicate that debug.mpsafenet must be set to 0 to prevent a
system lock when using this rule option.

Will setting debug.mpsafenet to 0 impact anything else on the box? A
quick googling shows it could impact performance on SMP machines, but
this is a uniproc box. Anything else I should keep an eye on?

Thanks,
Bryan