From owner-freebsd-bugs  Sun Aug  2 22:00:07 1998
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA26068
          for freebsd-bugs-outgoing; Sun, 2 Aug 1998 22:00:07 -0700 (PDT)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA26032
          for <freebsd-bugs@FreeBSD.org>; Sun, 2 Aug 1998 22:00:04 -0700 (PDT)
          (envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.8.8/8.8.5) id WAA17676;
	Sun, 2 Aug 1998 22:00:01 -0700 (PDT)
Received: from ns.altadena.net (ns.altadena.net [206.126.144.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id VAA25943
          for <FreeBSD-gnats-submit@freebsd.org>; Sun, 2 Aug 1998 21:58:55 -0700 (PDT)
          (envelope-from pete@ns.altadena.net)
Received: (from pete@localhost)
	by ns.altadena.net (8.9.1/8.8.6) id VAA02596;
	Sun, 2 Aug 1998 21:58:31 -0700 (PDT)
Message-Id: <199808030458.VAA02596@ns.altadena.net>
Date: Sun, 2 Aug 1998 21:58:31 -0700 (PDT)
From: pete@altadena.net
Reply-To: pete@altadena.net
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: bin/7475: IPFW problem
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         7475
>Category:       bin
>Synopsis:       IPFW fails to load a file on boot
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Aug  2 22:00:00 PDT 1998
>Last-Modified:
>Originator:     Pete Carah
>Organization:
Altadena Internet
>Release:        FreeBSD 2.2.7-STABLE i386
>Environment:

	Multiple interfaces, using IPFW for policy

>Description:

	Using a filename as argument to firewall_type in rc.conf,
	results in a boot failure because ipfw will not accept a -q
	option if a filename is given.  I have worked around this
	by replacing the last line in rc.firewall with
	ipfw ${firewall_type} </dev/null

	The -q (or redirection) should be needed since the leading flush in
	the firewall config file makes the boot hang otherwise.  However,
	when the config is coming from a file, there appears to be no
	way to make ipfw accept a -q.

>How-To-Repeat:

	See Description

>Fix:
	
	The first time I ran into this I did a minor rewrite to ipfw
	so it would parse arguments correctly; it currently uses getopt 
	improperly.  Then I did a make world and lost my fixes :-(  
	The removal of -q from that last command line, and redirect of 
	stdin from /dev/null at least works around the problem, though 
	it isn't a real fix.

>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message