From owner-freebsd-security@FreeBSD.ORG Wed Oct 26 12:46:19 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8E8C216A41F for ; Wed, 26 Oct 2005 12:46:19 +0000 (GMT) (envelope-from claco@chrislaco.com) Received: from mail.icantfocus.com (mail.icantfocus.com [65.42.59.33]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0E2A343D48 for ; Wed, 26 Oct 2005 12:46:18 +0000 (GMT) (envelope-from claco@chrislaco.com) Received: from [191.2.3.14] (mail2.summitracing.com [208.44.49.7]) by mail.icantfocus.com (Postfix) with ESMTP id 9EB36237F5; Wed, 26 Oct 2005 08:16:53 -0400 (EDT) Message-ID: <435F7A98.9010800@chrislaco.com> Date: Wed, 26 Oct 2005 08:46:16 -0400 From: "Christopher H. Laco" User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923) X-Accept-Language: en-us, en MIME-Version: 1.0 To: John Fitzgerald References: <5e49673f0510251032w38312bb7kb082b15d97d00082@mail.gmail.com> <20051026071948.GI52933@fw.wtp3.org> <5e49673f0510260525m796f8b06g2a9176e4858c1708@mail.gmail.com> In-Reply-To: <5e49673f0510260525m796f8b06g2a9176e4858c1708@mail.gmail.com> X-Enigmail-Version: 0.92.0.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060300090806020809070200" X-Mailman-Approved-At: Wed, 26 Oct 2005 17:14:45 +0000 Cc: freebsd-security@freebsd.org, Krzysztof Stryjek Subject: Re: ipf stopped working on 5.3 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: claco@chrislaco.com List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Oct 2005 12:46:19 -0000 This is a cryptographically signed message in MIME format. --------------ms060300090806020809070200 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit John Fitzgerald wrote: > Yeah, options INET6 is already in there (by default). It's curious that it > would stop working on one of my servers, yet remain functional on the other. > > -JJ > I missed most of this thread, so I'm sure this has been covered. Does it just not work after boot, but works after issuing ipf -Fav -f /etc/ipf.rules? I spent a couple of days trying to figure out why my ipf rules were loading on boot...and the it turned out to be the fact that I put bash in my roots .cshrc file...it was short cirtuiting the startup scripts for ipf... -=Chris --------------ms060300090806020809070200 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII8TCC AtMwggI8oAMCAQICAw37vjANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwMjA3MTc0NDM3WhcNMDYwMjA3MTc0NDM3 WjBFMR8wHQYDVQQDExZUaGF3dGUgRnJlZW1haWwgTWVtYmVyMSIwIAYJKoZIhvcNAQkBFhNj bGFjb0BjaHJpc2xhY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOzj 4xFQtv4Fjr44h4AmlOTqOYw4PM80JgQrIhCQpJlQQgr+gltu+HqCdkU+8nO+MjTOSgDH98Vx t0GK7Y7uZkwPkYM+av/RQf37y7QMPlrQiBJcKb1TYa1yWijjdvwOpEB1RSnEBtKKXN/Yc6WF kV/mRGpCKoaxCC6YeBr4uWXXduz6KOR4RLBE3+EmxzUeGwPulHmS/evmPkt2Z7O/AVx2y1zW zng76M1mftCw9dI7nob1F9xhIjdHEbjivysFNFmqqH0HDwkcM/VgXoU5pQNNzkglwN22MlDH 6ZylE6fCLHzzIh+1t5wdFmN+YtvemhuxO6puVuSsngJaQXBHvwIDAQABozAwLjAeBgNVHREE FzAVgRNjbGFjb0BjaHJpc2xhY28uY29tMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQAD gYEAaxPn+huyClyf0rU/gPmK9pqb9TSWPjxSpXhXDA9rweZiDM7kapY+s+gYQWsN2aS0Aeaz ugPigDLVcFejf4ZxZKIKfuj05rIFC0HYg9mE6rQE8PPJP1y8Ln8Nttr6uLBKBxgPTz26sOQP k+kfFo1su7WSJk5DHHcnIplfPHew+NYwggLTMIICPKADAgECAgMN+74wDQYJKoZIhvcNAQEE BQAwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1 MDIwNzE3NDQzN1oXDTA2MDIwNzE3NDQzN1owRTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWls IE1lbWJlcjEiMCAGCSqGSIb3DQEJARYTY2xhY29AY2hyaXNsYWNvLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMDs4+MRULb+BY6+OIeAJpTk6jmMODzPNCYEKyIQkKSZ UEIK/oJbbvh6gnZFPvJzvjI0zkoAx/fFcbdBiu2O7mZMD5GDPmr/0UH9+8u0DD5a0IgSXCm9 U2Gtcloo43b8DqRAdUUpxAbSilzf2HOlhZFf5kRqQiqGsQgumHga+Lll13bs+ijkeESwRN/h Jsc1HhsD7pR5kv3r5j5LdmezvwFcdstc1s54O+jNZn7QsPXSO56G9RfcYSI3RxG44r8rBTRZ qqh9Bw8JHDP1YF6FOaUDTc5IJcDdtjJQx+mcpROnwix88yIftbecHRZjfmLb3pobsTuqblbk rJ4CWkFwR78CAwEAAaMwMC4wHgYDVR0RBBcwFYETY2xhY29AY2hyaXNsYWNvLmNvbTAMBgNV HRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGsT5/obsgpcn9K1P4D5ivaam/U0lj48UqV4 VwwPa8HmYgzO5GqWPrPoGEFrDdmktAHms7oD4oAy1XBXo3+GcWSiCn7o9OayBQtB2IPZhOq0 BPDzyT9cvC5/Dbba+riwSgcYD089urDkD5PpHxaNbLu1kiZOQxx3JyKZXzx3sPjWMIIDPzCC AqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdl c3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3Vs dGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UE AxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25h bC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVow YjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4x LDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqG SIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/ DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+ K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIG A1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUu Y29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQi MCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBI jNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZ foSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfj ViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEBMGkwYjELMAkGA1UEBhMCWkExJTAjBgNV BAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJz b25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMN+74wCQYFKw4DAhoFAKCCAacwGAYJKoZIhvcN AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDUxMDI2MTI0NjE2WjAjBgkqhkiG 9w0BCQQxFgQUeqZ7gW3Y3bnXVO1u09U9YQm3qfswUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG 9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcN AwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3Rl IENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt YWlsIElzc3VpbmcgQ0ECAw37vjB6BgsqhkiG9w0BCRACCzFroGkwYjELMAkGA1UEBhMCWkEx JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0 ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMN+74wDQYJKoZIhvcNAQEBBQAEggEA sCEECRIfjy/qdW8bMNMLwYcS4/HKFwTUVQOcgr69UAItvRLhz9ajw7kDiTulIR7PQTTs4zFG mq9TWNtpsdRDR1ZtclEnMUpaG+SYGVD2yQVZ9FLFl5JCDkSSOI1x2FNuo5oMOONKWDohb/eC 57sc0a6+Y745J0wNBWoyERFuonCe2+u6IRSTZk1iVPe23SUfP4aorYWuhJmcI2xlicOGRHCw NYRz193vslSCgVJNbSypjyUPoet4GtW/yxvCgc3EkWBaPvKOFyRrItOXXSjMdsFrAlvg+mar dUx7U1LbZfScTkgBHLP8lk7EXBt1vhwwyvVzRduWFZMpDF86plTGmwAAAAAAAA== --------------ms060300090806020809070200--