Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 8 Feb 2004 23:49:22 +1100
From:      Tony Frank <tfrank@optushome.com.au>
To:        Vasenin Alexander aka BlackSir <blacksir@number.ru>
Cc:        Luigi Rizzo <rizzo@icir.org>
Subject:   Re: Syntax to block 38 IPs
Message-ID:  <20040208124922.GA97343@marvin.home.local>
In-Reply-To: <NKEJKOHEKMBIMCCEHEPKOEJJCCAA.blacksir@number.ru>
References:  <3.0.5.32.20040206125411.01e841f0@10.0.0.15> <NKEJKOHEKMBIMCCEHEPKOEJJCCAA.blacksir@number.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

On Fri, Feb 06, 2004 at 10:59:03PM +0300, Vasenin Alexander aka BlackSir wrote:

> To upgrade to IPFW2 you need to recompile the kernel with IPFW2 option,
> recompile 'libalias' library and 'ipfw' control program. man ipfw would
> help. I'm not sure, but I suppose IPFW2 don't marked STABLE for 4.x

Word of advice, also recompile anything that staticly uses the libalias library.
natd specifically is one I missed which broke my system after reboot.

ipfw2 tool was built, new alias library was built but natd compiles in libalias
as a static, hence although my firewall rules loaded, everything through natd
broke (including DNS lookups which 'broke' the rest of the startup)

I resolved this by adding 'IPFW2=YES' to /etc/make.conf

Regards,

Tony



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040208124922.GA97343>