From owner-freebsd-questions  Tue Sep  4 12:54:47 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by hub.freebsd.org (Postfix) with ESMTP id 2AE0437B409
	for <freebsd-questions@FreeBSD.ORG>; Tue,  4 Sep 2001 12:54:31 -0700 (PDT)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.11.3/8.9.3) with ESMTP id f84JpMf35010;
	Tue, 4 Sep 2001 16:51:24 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Tue, 4 Sep 2001 16:51:22 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: Chojin <freebsd@tarakan-network.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: ipnat, ipf, ipfstat devices not configured
In-Reply-To: <024e01c13531$33498390$0245a8c0@chojin>
Message-ID: <20010904164621.N29260-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, 4 Sep 2001, Chojin wrote:

> Hello,
>
> Since  I recompiled my system and kernel (4.3-RELEASE) I can't use ipnat ipf
> and ipfstat:
>
> #ipnat
> /dev/ipnat: open: Device not configured
>
> #ipf -Fa -f /etc/ipf.rules
> open device: Device not configured
> ioctl(SIOCIPFFL): Bad file descriptor
> open device: Device not configured
> 2:ioctl(add/insert rule): Bad file descriptor
> 3:ioctl(add/insert rule): Bad file descriptor

It seems you don't have IP Filter support in your kernel. The kernel options
are fine, maybe you recompiled the kernel but forgot to install it.

Do a 'dmesg | grep IP', a line like this should apear:

IP Filter: v3.4.16 initialized.  Default = pass all, Logging = enabled

Try booting GENERIC and kldload ipl, to load IP Filter as a module.
I load ipf as a module, to keep it up to date with Darren's fixes. The upgrade
is easier.


Hope This helps.


				Fer


>
> #ipfstat
> open: Device not configured
>
> I did all things needed as MAKEDEV all (done by mergemaster).
>
> There are all options unchanged in my kernel configuration file:
> options         IPFILTER                #ipfilter support
> options         IPFILTER_LOG            #ipfilter logging
> options         IPFIREWALL
> options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
> options         IPFIREWALL_DEFAULT_TO_ACCEPT
> options         IPDIVERT
>
> I don't understand why there is this problem.
> Anyone could help me ?
>
> Chojin
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message