Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Dec 2002 10:23:08 -0800 (PST)
From:      Julian Elischer <julian@elischer.org>
To:        Ruslan Ermilov <ru@FreeBSD.ORG>
Cc:        Matthew Dillon <dillon@apollo.backplane.com>, "David O'Brien" <obrien@FreeBSD.ORG>, current@FreeBSD.ORG
Subject:   Re: ipfw userland breaks again.
Message-ID:  <Pine.BSF.4.21.0212161022400.11938-100000@InterJet.elischer.org>
In-Reply-To: <20021216174117.GB34320@sunbay.com>

next in thread | previous in thread | raw e-mail | index | archive | help


On Mon, 16 Dec 2002, Ruslan Ermilov wrote:

> On Sat, Dec 14, 2002 at 02:09:13PM -0800, Matthew Dillon wrote:
> > 
> > :
> > :On Sat, Dec 14, 2002 at 12:38:13PM -0800, Matthew Dillon wrote:
> > :>     then, as usual, IPFW with the new kernel and
> > :>     old world fails utterly and now the fragging machine can't access the
> > :
> > :Hear hear!!  I am >< tempted to have /sbin/ipfw moved to src/sys.
> > 
> >     How about something like this (patch enclosed).  If there are no
> >     objections I will commit it along with a documentation update, and
> >     maybe also add some RC code give the sysad a chance to ipfw unbreak if
> >     ipfw otherwise fails during the boot sequence.
> > 
> Matt,
> 
> How this could be helpful in a remote upgrade scenario that has
> IPFW ABI incompatibility issues?
> 
> One alternative approach would be to not compile IPFW into a
> kernel but rather have it loaded as a module.  Then, you
> install new kernel, edit out ipfw_enable="YES" for the time
> being, reboot with the new kernel, installworld, edit
> ipfw_enable="YES" back in, reboot, and you're done.


I think having ipfw as a module doesn't get you fwd or divert.
(I may be wrong)

> 
> 
> Cheers,
> -- 
> Ruslan Ermilov		Sysadmin and DBA,
> ru@sunbay.com		Sunbay Software AG,
> ru@FreeBSD.org		FreeBSD committer,
> +380.652.512.251	Simferopol, Ukraine
> 
> http://www.FreeBSD.org	The Power To Serve
> http://www.oracle.com	Enabling The Information Age
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0212161022400.11938-100000>