Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 01 Apr 2010 23:34:55 +0200
From:      "Terrence Koeman" <root@mediamonks.net>
To:        "Tim Gustafson" <tjg@soe.ucsc.edu>,  "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   RE: ipfw weirdness after csup/buildworld
Message-ID:  <fc45f8531d137944b12932c91814b868@mediamonks.com>
In-Reply-To: <1833158705.252071270141892098.JavaMail.root@mail-01.cse.ucsc.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
I've seen the same, see: http://forums.freebsd.org/showthread.php?p=3D75765

-- 
Regards,
T. Koeman, MTh/BSc/BPsy; Technical Monk

MediaMonks B.V. (www.mediamonks.com)
Please quote all replies in correspondence.


> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-
> questions@freebsd.org] On Behalf Of Tim Gustafson
> Sent: Thursday, April 01, 2010 7:12 PM
> To: freebsd-questions@freebsd.org
> Subject: ipfw weirdness after csup/buildworld
> 
> I am running: FreeBSD 8.0-STABLE amd64
> 
> After recently csup'ing to the latest sources and then a build/install
> cycle, my ipfw started misbehaving badly.  I'm seeing lots of:
> 
> ipfw: install_state: entry already present, done
> 
> and also lots of:
> 
> ipfw: ouch!, skip past end of rules, denying packet
> 
> When I did an "ipfw list", I got something like this:
> 
> 00000  ip from any to any
> 
> Note the rule number is all zeros, and there's no "allow" or "deny".
> Adding rules or removing rules didn't fix anything, nor did an "ipfw
> flush".  Once it was in that state, attempting to "kldunload ipfw"
> caused the system to hang.  The only fix for now was to disable the
> firewall.
> 
> When I went into single user mode, and did:
> 
> kldload ipfw
> ipfw /etc/firewall.rules (which is the same ruleset I had loaded on
> boot)
> 
> everything worked fine, but when I went into multi-user mode and did
> the same thing, it failed with the symptoms listed above.
> 
> Just to be sure, a day after this started happening I did a csup again
> and another build/install cycle but got exactly the same results.
> 
> Any ideas?
> 
> Tim Gustafson
> Baskin School of Engineering
> UC Santa Cruz
> tjg@soe.ucsc.edu
> 831-459-5354
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-
> unsubscribe@freebsd.org"






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fc45f8531d137944b12932c91814b868>