Date: 16 Jun 2003 21:35:44 -0400 From: Mike Bohan <bogin@shortcircut.org> To: freebsd-current@freebsd.org Subject: -E flag in /etc/rc.d/ipfilter causes warnings Message-ID: <1055813744.18453.21.camel@diesel>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Hello there, I recently ran into a slight issue with ipfilter running on 5.1-RELEASE. My machine serves the simple purpose as a nat gateway, so ipfilter is always going to be necessary on it. Due to this fact, i decided to include options IPFILTER in the kernel config, instead of dynamically loading the ipl.ko module. However, when ipfilter is used in the kernel image, it's automatically initialized (and thus does not need the -E flag). This has been noted in rc.conf for some time, and I of course removed the -E from the ipfilter_flags variable in that file. However, after booting my kernel with the IPFILTER options, I noticed warnings in my kernel logs that "ipfilter has already been initialized", which is consistent with using flag -E when ipf is already initialized. After some brief analysis, I discovered that /etc/rc.d/ipfilter actually uses -E in the shell script function, ipfilter_start(). After removing the two instances of the -E and rebooting, the warning messages disappeared at boot time. Is this a known glitch in the hopes that people start soley using the ipl kernel module? It's really not a big deal either way, but I was more just curious than anything in which direction it's going. Thanks in advance! -- Mike Bohan <bogin@shortcircut.org> [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQA+7nBwejdihSuinPURAiO5AJ0ZI2AGKKXus9T/nATueOax8+bOuACdHnV3 jAlWrGnUJRDs8bf1qoDW264= =Vd/R -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1055813744.18453.21.camel>