From owner-freebsd-current  Sat Dec 14 12:38:15 2002
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 16A0C37B401
	for <current@freebsd.org>; Sat, 14 Dec 2002 12:38:14 -0800 (PST)
Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C107543EC2
	for <current@freebsd.org>; Sat, 14 Dec 2002 12:38:13 -0800 (PST)
	(envelope-from dillon@apollo.backplane.com)
Received: from apollo.backplane.com (localhost [127.0.0.1])
	by apollo.backplane.com (8.12.5/8.12.5) with ESMTP id gBEKcDOM029925
	for <current@freebsd.org>; Sat, 14 Dec 2002 12:38:13 -0800 (PST)
	(envelope-from dillon@apollo.backplane.com)
Received: (from dillon@localhost)
	by apollo.backplane.com (8.12.5/8.12.5/Submit) id gBEKcDVv029924;
	Sat, 14 Dec 2002 12:38:13 -0800 (PST)
	(envelope-from dillon)
Date: Sat, 14 Dec 2002 12:38:13 -0800 (PST)
From: Matthew Dillon <dillon@apollo.backplane.com>
Message-Id: <200212142038.gBEKcDVv029924@apollo.backplane.com>
To: current@freebsd.org
Subject: ipfw userland breaks again.
References:  <200212142025.aa99706@salmon.maths.tcd.ie>
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

    !@#$Q@#$@#$@#$

    This is about the 90th time my -current box has become unusable.
    First it won't let me installworld because of some signal snafu with
    the kernel being too old, then, as usual, IPFW with the new kernel and
    old world fails utterly and now the fragging machine can't access the
    network which means I can't installworld.  So now I have to boot the
    old kernel, install the new ipfw, then reboot so I can install the new
    world.

    I am really getting sick and tired of the ipfw userland breaking every
    other week.  It makes the system unusable when IPFIREWALL_DEFAULT_TO_ACCEPT
    is not specified in the kernel config.

    I am going to add an ioctl() that unbreaks the firewall for these cases.
    ipfw -unbreak or something like that, which doesn't fail whenever someone
    changes the ipfw kernel interface.

					    -Matt


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message