kern/74104: ipfw2/1 conflict not detected or reported, manpage
barney at pit.databus.com
Thu Nov 18 23:00:50 PST 2004
>Synopsis: ipfw2/1 conflict not detected or reported, manpage unclear
>Arrival-Date: Fri Nov 19 07:00:49 GMT 2004
>Originator: Barney Wolff
>Release: FreeBSD 4.10-STABLE i386
System: FreeBSD pit.databus.com 4.10-STABLE FreeBSD 4.10-STABLE #1: Fri Nov 19 01:22:10 EST 2004 toor at pit.databus.com:/usr/obj/usr/src/sys/PIT i386
ipfw manpage for running ipfw2 under STABLE (RELENG-4) is not clear that
kernel option IPFW2 is required along with IPFW2=TRUE in /etc/make.conf.
The result is a system that appears to run but has no rules applied,
because ipfw hangs and presumably the startup scripts never complete.
There is no log entry indicating anything wrong.
add IPFW2=TRUE to /etc/make.conf without option IPFW2 in kernel conf.
At the very minimum, clarify the manpage to indicate that the make.conf
setting controls only world, not the kernel. I at least was fooled,
and I don't consider myself mentally challenged - although admittedly
I should have taken the reference to buildworld as a hint.
Beyond that, "it would be nice" if ipfw complained loudly on a mismatch
between world and kernel conf. Better, of course, would be a single
flag to control both world and kernel, as there is no conceivable reason
ever to want them out of sync.
More information about the freebsd-bugs