How to correct *Failed sysctlbyname("net.inet.ip.fw.tables_max")*

[Ian Smith]

In freebsd-questions Digest, Vol 274, Issue 12, Message 18
On Sat, 5 Sep 2009 12:57:46 +0300 ??????? ??????? <kes-kes at yandex.ru> wrote:

 > vpn# ipfw table 12 list
 > ipfw: Failed sysctlbyname("net.inet.ip.fw.tables_max")
 > vpn# sysctl -a | grep net.inet.ip.fw
 > net.inet.ip.fw.dyn_keepalive: 1
 > net.inet.ip.fw.dyn_short_lifetime: 5
 > net.inet.ip.fw.dyn_udp_lifetime: 10
 > net.inet.ip.fw.dyn_rst_lifetime: 1
 > net.inet.ip.fw.dyn_fin_lifetime: 1
 > net.inet.ip.fw.dyn_syn_lifetime: 20
 > net.inet.ip.fw.dyn_ack_lifetime: 300
 > net.inet.ip.fw.static_count: 46
 > net.inet.ip.fw.dyn_max: 4096
 > net.inet.ip.fw.dyn_count: 0
 > net.inet.ip.fw.curr_dyn_buckets: 256
 > net.inet.ip.fw.dyn_buckets: 256
 > net.inet.ip.fw.default_rule: 65535
 > net.inet.ip.fw.verbose_limit: 0
 > net.inet.ip.fw.verbose: 1
 > net.inet.ip.fw.debug: 1
 > net.inet.ip.fw.one_pass: 0
 > net.inet.ip.fw.autoinc_step: 100
 > net.inet.ip.fw.enable: 1
 > vpn# uname -a
 > FreeBSD vpn.in 7.1-RELEASE-p7 FreeBSD 7.1-RELEASE-p7 #1: Sat Sep  5 00:26:18 EEST 2009     kes at vpn.in:/usr/obj/usr/src/sys/KES_KERN_v71  i386
 > 
 > I just upgrade from 7.0.
 > Sources are RELENG_7_1

Kes, perhaps your kernel and userland sources may be out of synch?

I haven't hunted through CVS, but located a message in ipfw@ from 
Ganbold with a patch proposing to add that very sysctl to ip_fw2.c
dated 1st September 2008 .. was that before or after 7.1-RELEASE?

Happy hunting, Ian