From owner-freebsd-questions@FreeBSD.ORG Tue Mar 18 13:19:31 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6B4B5F32 for ; Tue, 18 Mar 2014 13:19:31 +0000 (UTC) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 2EB62EF2 for ; Tue, 18 Mar 2014 13:19:31 +0000 (UTC) Received: from r56.edvax.de (port-92-195-67-138.dynamic.qsc.de [92.195.67.138]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 5F23C27650; Tue, 18 Mar 2014 14:09:50 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id s2ID9QNJ003612; Tue, 18 Mar 2014 14:09:26 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Tue, 18 Mar 2014 14:09:26 +0100 From: Polytropon To: cbrace Subject: Re: PF error: DIOCSETLIMIT Message-Id: <20140318140926.6a0a9ef1.freebsd@edvax.de> In-Reply-To: <1395147094009-5895376.post@n5.nabble.com> References: <1395147094009-5895376.post@n5.nabble.com> Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Mar 2014 13:19:31 -0000 On Tue, 18 Mar 2014 05:51:34 -0700 (PDT), cbrace wrote: > Hi all, > > Since recently upgrading my VPS running FreeBSD to 10-RELEASE, something > broke my PF config; Every time I try to load the ruleset, I see this: > > # pfctl -f /etc/pf.conf > No ALTQ support in kernel > ALTQ related functions disabled > pfctl: DIOCSETLIMIT > > And the rules are not loaded. I've Googled this but found only this post > from several weeks ago on the FreeBSD webforum: > https://forums.freebsd.org/viewtopic.php?f=44&t=45325 > > No answer there yet. > > Does anyone here have any idea what is going wrong on my server? Are you using the GENERIC or a custom kernel? Check if the configuration file contains the ALTQ options, just to be sure. I assume those are not part of the kernel you're currently running. At least that's what I would conclude from the error message you've shown. If I remember correctly, for pf you need the following entries in the kernel configuration file: device pf device pflog device pfsync options ALTQ options ALTQ_CBQ options ALTQ_RED options ALTQ_RIO options ALTQ_HFSC options ALTQ_PRIQ options ALTQ_NOPCC Or aren't they need anymore in 10.0? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...