From nobody Fri Apr 24 07:52:33 2026 X-Original-To: ipfw@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4g24tn4ChVz6ZjdT for ; Fri, 24 Apr 2026 07:52:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4g24tn3gv7z49T4 for ; Fri, 24 Apr 2026 07:52:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777017153; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WIQOK9AA9zm6IKYv2/U7+0mR6Lh68fM8aAbB+knbIlg=; b=DfD+VeUJN5AyX9jgKbrey2GJ1JCldiKfn6Jwqh4wgaPn0DS2KNnS4j918eh6BZ7ZHpvCuX K7Lh7N17uzyJgoRf/q2PJGg9OsF5IuBh2z+RB1ppy9cZKysUGbsCkMIgIcQ95sMrDwK/uo cTWJNXjb1ZlR930SQxH67WA+F3XHUlP2VJn+wBK1UDCgzqf+8RcphxzJg7aHM8BuhbYDjc itn78SzdeLNFZA3yxZsm2P4ZnFNgNt0vQrPyJiao8SE4FTwN18kM+VaGQnA4FO2n/uAWL5 0Q+igAaaFNlu+ZCueDjGUY4NNkMumLBJHaFlvGyuJHr27I7iRO8QzN36F8P1Aw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1777017153; a=rsa-sha256; cv=none; b=axlhj5x9Eghz0E+hSgHbIzpHaT7datECzJ8LkI3jkzPDSR3TmDf/S4FCBF7aKnltceJT3z C37AP34MQ92RWveEkgWovzSri1ZeqSPnHlGxmZYbqVSEVUHYJAVmB8eA1226dHypXlioQz uTDqN4RgE7KdIYHluw+Nbi13TQQP5V3uk0gU6QmCXSqrvu9PJs/XXVikbAxMxSLKHe0A3v FXv130hoGiAavztz8zyouFGFme2+IJ+vHiXjJaOD0bnfsLWtXWV3I+gGwhN4szoniTirA0 KuLzHO1C4+J6aF+dOdOWGwS8FsraWKEwXhLC7u0Ovd8ZtX0AgDQsGhyoI8QyNA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777017153; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WIQOK9AA9zm6IKYv2/U7+0mR6Lh68fM8aAbB+knbIlg=; b=GjP7Wri6QzkIyMLpwI6bm91xD9IfKsdMEP/BromD6x2ILw/b2bkpCvq0i43gUHrFVHmYrp 3qHPJOZKEaGNehqxe9ZVgok3CBIW6xWeJMWR5c6u898SGIHzRuWkMi0f7AXSdiP7/hPh8f 1urDaabpGckIWth1Mjpm4QK8oHhO4jOPw0cOdRUxNGHwvEKTlLRMRQY6o/BpCHbi795rRD j3jyGM0OhNQpOAA9nQqfVd9lgGN1gO/0iGS0wY/SoIDGwXwGofF9YKTPeAZ55+gl3bvUi1 ZPSxTnzj8nYshaA4NBXmqIjn2FcAz+QaDaIRr509K9DHPsNU5uj3QBqG+A1/tw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4g24tn3Bb1ztjq for ; Fri, 24 Apr 2026 07:52:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 63O7qXTR006071 for ; Fri, 24 Apr 2026 07:52:33 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 63O7qXUG006070 for ipfw@FreeBSD.org; Fri, 24 Apr 2026 07:52:33 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ipfw@FreeBSD.org Subject: [Bug 291562] freebsd-update: 14.3-15.0 ipfw incompatibility disaster for remote system with no console access Date: Fri, 24 Apr 2026 07:52:33 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-RELEASE X-Bugzilla-Keywords: regression X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: vova@zote.me X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ipfw@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: IPFW Technical Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-ipfw List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ipfw@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D291562 --- Comment #19 from vova@zote.me --- Even updated 14.4 jail with vnet+ipfw - does not work: # cbsd jrestart ns3 Stopping jail: ns3, parallel timeout=3D5 ... add net ::0.0.0.0: gateway ::1 ipfw: setsockopt(IP_FW_XDEL): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument ipfw: getsockopt(IP_FW_XADD): Invalid argument Firewall rules loaded. ``` in jail: ``` ns3# freebsd-version 14.4-RELEASE-p2 ns3# uname -UK 1404000 1404000 ns3# strings /sbin/ipfw | grep ipfw15 /sbin/ipfw15 ns3# freebsd-update IDS | fgrep -v /etc/ | fgrep -v /root/ src component not installed, skipped Looking up update.FreeBSD.org mirrors... 3 mirrors found. Fetching metadata signature for 14.4-RELEASE from update2.freebsd.org... do= ne. Fetching metadata index... done. Inspecting system... done. ns3# ``` in host: ``` # uname -UK 1500068 1500068 # freebsd-version 15.0-RELEASE-p6 ``` ``` --=20 You are receiving this mail because: You are the assignee for the bug.=