ipfilter loading on 5.3

Richard Cotrina rcc at speedy.net.pe
Mon Nov 8 09:21:58 PST 2004


Firs of all, check if the module has been loaded :

# kldstat

You should see the module ipl loaded :

Id Refs Address    Size     Name
 2    1 0xc36df000 18000    ipl.ko

If not, load it manually :

# kldload ipl


On Mon, 8 Nov 2004, dave wrote:

> Hello,
>     I believe i am having a configuration error. I've got a new 5.3 box to
> which i'm atempting to get ipfilter going. I read the updated handbook and
> have added:
>
> ipfilter_enable="YES"
> ipfilter_rules="/etc/ipf.rules"
> ipmon_enable="YES"
> ipmon_flags="-Dsvn"
>
> to my rc.conf file. When i try to manually load up my rules file with:
> ipf -FA -f /etc/ipf.rules
>  i am getting an error "can not open no such device"
> I have not compiled anything for ipfilter in to the kernel as i had done
> previously i understood from the handbook that ipf was capable of being
> dynamically loaded and the rc.conf line would suffice. I've also added:
> Local0.* /var/log/ipfilter.log
> to my syslog.conf file getting ipf traffic in a separate logfile. When i go
> to rotate this file with newsyslog is there any special flags i should pass?
> Thanks.
> Dave.
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>


More information about the freebsd-questions mailing list