From owner-freebsd-security Wed Jan 24 19: 2:31 2001 Delivered-To: freebsd-security@freebsd.org Received: from server1.link-net.com (link-net.com [209.10.61.231]) by hub.freebsd.org (Postfix) with ESMTP id 5C42F37B69B for ; Wed, 24 Jan 2001 19:02:11 -0800 (PST) Received: from scott1 (scott1.link-net.com [209.10.61.241]) by server1.link-net.com (Post.Office MTA v3.5.3 release 223 ID# 0-52894U200L100S0V35) with SMTP id com for ; Wed, 24 Jan 2001 19:02:10 -0800 Reply-To: From: "Scott Raymond" To: Subject: RE: Problems with IPFW patch Date: Wed, 24 Jan 2001 19:02:10 -0800 Keywords: FreeBSD Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) In-Reply-To: <20010124183608.C45221@citusc17.usc.edu> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Not at all. I had planned on recompiling the kernel. I have kern.securelevel set to 2, so I need to reboot to single user mode in order to do the make isntallworld. So I saw the same ipfw errors he did when I rebooted. After the kernel recompile was done, the errors went away. I did the cvsup update because I saw the update posted to the list. I also recalled that firewalling support is in the kernel itself, so the make world had to be accompanied by a kernel recompile. -- Scott ======================= Scott Raymond http://soundamerica.com ======================= > -----Original Message----- > From: owner-freebsd-security@FreeBSD.ORG > [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Kris Kennaway > Sent: Wednesday, January 24, 2001 6:36 PM > To: Scott Raymond > Cc: freebsd-security@FreeBSD.ORG > Subject: Re: Problems with IPFW patch > > > On Wed, Jan 24, 2001 at 03:43:28PM -0800, Scott Raymond wrote: > > You must have done what I did - make world with a recent > cvsup source > > tree update. You need to recompile and install the new > kernel as well. > > Do you mean that you tried just recompiling and reloading the module > as described in the advisory, and it didn't work, or that you didn't > touch the kernel at all, only rebuild ipfw(8)? > > Kris > > -- > NOTE: To fetch an updated copy of my GPG key which has not expired, > finger kris@FreeBSD.org > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message