Re: ipfw changes and jails

In reply to: Ronald Klop : "ipfw changes and jails"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: A FreeBSD User <freebsd_at_walstatt-de.de>
Date: Mon, 17 Mar 2025 13:07:02 UTC

Am Mon, 17 Mar 2025 13:37:40 +0100 (CET)
Ronald Klop <ronald-lists@klop.ws> schrieb:

> Hi,
> 
> When running 14.2-RELEASE VNET jails on 15-CURRENT ipfw does not work anymore in the jail.
> 
> Can this commit be involved?
> https://cgit.freebsd.org/src/commit/?id=4a77657cbc01
> 
> Copying the /sbin/ipfw binary from 15-CURRENT to /sbin in the 14.2 jail resolves the issue
> for me.
> 
> Example errors:
> add net ::0.0.0.0: gateway ::1
> ipfw: setsockopt(IP_FW_XDEL): Invalid argument
> ipfw: getsockopt(IP_FW_XADD): Invalid argument
> 
> # ipfw show
> ipfw: retrieving config failed: Invalid argument
> 
> 
> Regards,
> Ronald.
>  

Had the same problem here a couple of days ago.

Host's kernel and jail's/client's binaries are out of sync. I had to synchronise the jail's
binaries.

Kind regards,

oh 

-- 

A FreeBSD user