Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Feb 2006 21:00:33 +0000
From:      "Rick Helmus" <rhelmus@gmail.com>
To:        freebsd-stable@freebsd.org
Subject:   Ignoring firewall startup scripts
Message-ID:  <f9f64dbf0602171300j5bd874e4s@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hello all,
Today I upgraded to stable 6.1. Everything went successfull, however when I
booted I found out that I lost internet.

I have the following IPFW options in my kernel:

options IPFIREWALL
options IPDIVERT
options IPFIREWALL_FORWARD


rc.conf:

hostname=3D"Rick-FBSD.lan"
ifconfig_rl0=3D"DHCP"
ipv6_enable=3D"NO"
linux_enable=3D"YES"
gateway_enable=3D"YES"
firewall_enable=3D"YES"
firewall_script=3D"/etc/rc.firewall"
firewall_type=3D"open"
#ipv6_firewall_enable=3D"YES"
#ipv6_firewall_type=3D"OPEN"
natd_enable=3D"YES"
natd_interface=3D"rl0"
natd_flags=3D""
moused_enable=3D"NO"
moused_type=3D"NO"
saver=3D"daemon"
usbd_enable=3D"YES"
#samba_enable=3D"YES"
#cupsd_enable=3D"YES"
vpnbridge_enable=3D"NO"
#allscreens_flags=3D"MODE_280"


After typing 'ipfw list' I found out there was onlyone rule (65535) was
about blocking anything. This is the default afaik. Before upgrading I had
some other rules too (simply using the "open" IPFW firewall type from
rc.firewall).

So I'm assuming the ipfw scripts aren't called anymore?

I modified the kernel to allow anything by default so I got inet again, but
if anyone know a better solution... :)

Cheers,
Rick



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f9f64dbf0602171300j5bd874e4s>