From owner-freebsd-questions Mon Sep 16 14: 2:43 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B8BE437B400; Mon, 16 Sep 2002 14:02:40 -0700 (PDT) Received: from quadric.isometry.net (pc3-oxfd1-3-cust229.oxf.cable.ntl.com [213.107.68.229]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1032143E3B; Mon, 16 Sep 2002 14:02:40 -0700 (PDT) (envelope-from robin@isometry.net) Received: from ishadow (ishadow [192.168.108.2]) by quadric.isometry.net (Postfix) with ESMTP id BDEF0234; Mon, 16 Sep 2002 21:02:36 +0000 (UTC) From: "Robin Breathe" To: , , Cc: "'Darren Reed'" Subject: RE: Problems with ipfilter 3.4.29 under -STABLE (post 31/08/2002) Date: Mon, 16 Sep 2002 22:02:37 +0100 Message-ID: <000e01c25dc4$63174dc0$026ca8c0@ishadow> X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4024 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 In-Reply-To: <000101c25db0$83062340$026ca8c0@ishadow> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Apologies for posting this message. It seems that it was broken for me from 31/08/2002 until around 12/09/2002 (the last time I tried) after which I lost hope, seeing no changes on cvsweb. However having recompiled against today's -STABLE (~7pm GMT) things are running dandy (all other methodology being the same). Thanks to everyone that responded to my query, and to Darren Reed for his development of ipfilter :) -- Robin > Hi all, > > I'm interested to know if anyone is successfully running > ipf/ipnat under > -STABLE from after the merge on the 31st of August > (http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/ipfilter/). > > I have found that my existing rulesets fail with the new code. ipf > blocks everything, and ipnat doesn't do NAT. My rules are at > http://isometry.net/freebsd/ipfilter/, and they've worked flawlessly > with previous versions of ipfilter, in particular 3.4.27 from > 4.6.2-RELEASE to which I have reverted. > > I am making, and installing the base system and kernel using the > makefile from > http://www.freebsddiary.org/samples/makefile.for.build.world which has > also always worked flawlessly for me. > > I am trying to work out whether the problem lies with the recent merge > of ipfilter 3.4.29, or with my config. And from all the testing I've > been able to do, the problem seems to lie with ipfilter. > Other people's > experiences with the new code would be greatly appreciated. > > -- Robin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message