Date: Wed, 10 Nov 2004 21:10:22 +0100 From: Max Laier <max@love2party.net> To: freebsd-net@freebsd.org Cc: Bryan Fullerton <fehwalker@gmail.com> Subject: Re: ipfw jail and debug.mpsafenet Message-ID: <200411102110.29751.max@love2party.net> In-Reply-To: <35de0c3004111011412326d731@mail.gmail.com> References: <35de0c30041110074662654d9b@mail.gmail.com> <8AFDE7D8-3333-11D9-A34C-000A95C705DC@chittenden.org> <35de0c3004111011412326d731@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1333367.tAiQMdpVxz
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
On Wednesday 10 November 2004 20:41, Bryan Fullerton wrote:
> (gah, hit repy instead of reply all)
>
> On Wed, 10 Nov 2004 08:14:05 -0800, Sean Chittenden <sean@chittenden.org>=
=20
wrote:
> > Install the following patch from csjp@. He'll be committing this in
> > the next week or two. Once applied and compiled, fell free to turn
> > mpsafenet off. :)
One thing to note here:
debug.mpsafenet=3D1 (on) =3D> Giant-free network (that's the one you want=
) while
debug.mpsafenet=3D0 (off) =3D> Giant around the netstack (that's what is r=
equired=20
for IPFW's user/group/jail as well as PF's=20
user/group)
> Is the intention to MFC this to RELENG_5_3 (or RELENG_5_3_1...) or is
> this a 5.4 fix? If the latter I'll just stick with ipfw rules
This is certainly something for 5.4 as it must be tested carefully (you can=
=20
help! ;) It's not too bad to turn Giant back on unless you have a very busy=
=20
MySQL or Apache on a SMP-box, though.
> referencing the jail IP and forget about the ipfw jail option until
> it's fully cooked.
See above, testing is the only way to get it "fully cooked" in reasonable=20
time. From what I know, Christian's patch is already quite mature.
=2D-=20
/"\ Best regards, | mlaier@freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier@EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
--nextPart1333367.tAiQMdpVxz
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)
iD8DBQBBknW1XyyEoT62BG0RAl+DAJ90uw/AS/wO0SB3IWmMgWr1H4nF+gCfeAUu
kABnZS9udjYcgln1YNBFmbk=
=VhK7
-----END PGP SIGNATURE-----
--nextPart1333367.tAiQMdpVxz--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200411102110.29751.max>