Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Dec 2001 22:07:43 +0100
From:      Udo Schweigert <udo.schweigert@siemens.com>
To:        Daniel Leal <dleal@webvolution.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: IP Filter: already initialized
Message-ID:  <20011212210743.GA48220@alaska.cert.siemens.de>
In-Reply-To: <1008190792.3c17c5484856b@mail.webvolution.net>
References:  <1008190792.3c17c5484856b@mail.webvolution.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 12, 2001 at 20:59:52 +0000, Daniel Leal wrote:
> Hi!
> I am tring to learn something about security and i was trainning with
> a very nice tutorial from Marty Schlacter.
> But when I finished, I reboot and during boot I noticed the follwing messages:
> ...
> Doing initial network setup:
>  hostname
>  ipfilter
> IP Filter: already initialized
> IP FIlter: already initialized
>  ipmon
> ...
> 
> Am I "starting" ipfilter twice?
> My rc.conf has the follwing lines:
>    ipfilter_enable="YES"
>    ipmon_enable="YES"
> 
> And my kernel file has the ipfilter option:
>    options         IPFILTER
> 
> 
> It doesn't matter? If it does, what is the problem?
> I'm a security beginner and i am a "litle bit" confused with this...
> 
> Can someone help me?
> 

From /etc/defaults/rc.conf:

ipfilter_flags="-E"		# should be *empty* when ipf is _not_ a module
				# (i.e. compiled into the kernel) to
				# avoid a warning about "already initialized"

So: setting ipfilter_flags="" in your /etc/rc.conf will fix the problem.

Best regards

--
Udo Schweigert, Siemens AG   | Voice      : +49 89 636 42170
CT IC 3, Siemens CERT        | Fax        : +49 89 636 41166
D-81730 Muenchen / Germany   | email      : udo.schweigert@siemens.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011212210743.GA48220>