ipfilter problem in sparc64

Victor Giusti victor at unirc.eu
Wed Jan 3 14:06:35 PST 2007


Hi all
im have a sparc ultra 5 running freebsd 6.2-prerelease:

FreeBSD hathor.unirc.eu 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Thu 
Dec 28 21:29:39 CET 2006     
victor at hathor.unirc.eu:/usr/src/sys/sparc64/compile/hathor  sparc64
hathor#


and one intel PIII running:
%uname -a
FreeBSD terbium 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Thu Dec 28 
23:18:22 CET 2006     
victor at terbium:/mnt/data/src/sys/i386/compile/terbium  i386

freebsd installed  in the same day..


On Intel ipf it works ok

but in sparc NO!!!
im load the config and the network stop
im not have  DEFAULT_DROP option on the kernel




this is my ipf config tested on the two systems:

------------
#acepto todo desde local host
pass in  quick    on lo0 from any to any
pass out quick    on lo0 from any to any

pass in quick on sis0 from any to any    >>> NOTE: hme0 on sparc
pass out quick on sis0 from any to any  >>> this is the only diferent

# acepto todo desde la red interna
# aca chau icmp
pass out quick on tun0 proto icmp from any to any icmp-type 8 keep state
pass in  quick on tun0 proto icmp from any to any icmp-type 0

#traceroute
pass out on tun0 proto udp from any to any port 33434 >< 33690 keep state
pass in on tun0 proto icmp from any to any icmp-type timex
pass  in     quick on tun0 proto tcp from any to any port = 22  flags S 
keep stat
pass  in     quick on tun0 proto tcp from any to any port = 25  flags S 
keep state
pass  in     quick on tun0 proto tcp from any to any port = 80  flags S 
keep state
pass  in     quick on tun0 proto tcp from any to any port = 110  flags S 
keep state
pass  in     quick on tun0 proto tcp from any to any port = 6667  flags 
S keep state
pass  in     quick on tun0 proto tcp from any to any port = 6697  flags 
S keep state
pass  in     quick on tun0 proto tcp from any to any port = 6668  flags 
S keep state
pass  in     quick on tun0 proto tcp from any to any port = 7001  flags 
S keep state

#denegamos todo para afuera
pass  out    quick on tun0 proto tcp/udp from any to any keep state
#block return-icmp-as-dest(host-unr) in quick on tun0 all
block in quick on tun0 all
block out    quick all

----------------

I use this config without problems since 2001 (on x86 arch)
im have this problem whith FreeBSD/sparc64 6.0 6.1 and the last  6.2 rc1


ipf version its the same in the two systems:



sparc#ipf -V
ipf: IP Filter: v4.1.13 (528)
Kernel: IP Filter: v4.1.13             Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x10a

intel#ipf -V
ipf: IP Filter: v4.1.13 (416)
Kernel: IP Filter: v4.1.13             Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x10a



Any IDEA?





More information about the freebsd-sparc64 mailing list