Date: Tue, 24 Jun 2003 12:06:34 -0700 (PDT) From: randall ehren <randall@ucsb.edu> To: <freebsd-net@freebsd.org> Subject: ipfilter netboot problems Message-ID: <Pine.BSF.4.33.0306241206230.5536-100000@isber.ucsb.edu>
next in thread | raw e-mail | index | archive | help
hi,
i'm setting up a soekris net4501 machine and during some testing i ran
into a problem. basically, if i compile:
options IPFILTER_DEFAULT_BLOCK
into the kernel then i get the following error during a net boot (pxe):
nfs send error 65 for xxx.xxx.xxx.xxx:/soekris/
and then the machine stops booting as it can't continue to load the root
partition
after hunting and pecking around, i found out this relates to a "NFS
server host unreachable" error...
my guess was that since i had enabled default blocking by ipfilter, once
ipfilter loads then all network access is cut off until the rules
(/etc/ipf.rules) are applied.
so is this impossible to do since loading the rules would require
mounting a partition?
thanks,
-randall
--
:// randall s. ehren :// voice 805.893.5632
:// systems administrator :// isber|survey|avss.ucsb.edu
:// institute for social, behavioral, and economic research
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0306241206230.5536-100000>