Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Oct 2005 17:02:27 +0200
From:      Max Laier <max@love2party.net>
To:        Roger Grosswiler <roger@gwch.net>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: pf not loading
Message-ID:  <200510241702.39502.max@love2party.net>
In-Reply-To: <1130160566.699.2.camel@niobe>
References:  <1130097244.5844.4.camel@niobe> <200510232207.53352.max@love2party.net> <1130160566.699.2.camel@niobe>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1176758.KXNgfrnXcG
Content-Type: text/plain;
  charset="iso-8859-6"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Monday 24 October 2005 15:29, Roger Grosswiler wrote:
> Hello...
>
> Am Sonntag, den 23.10.2005, 22:07 +0200 schrieb Max Laier:
> > On Sunday 23 October 2005 21:54, Roger Grosswiler wrote:
> > > i installed 6.0 RC1 and filled pf_enable=3D"YES" as i did in 5.4
> > >
> > > But, no pf is loaded while startup. no /dev/pf is there. i can kldload
> > > pf, but then the ruleset won't be loaded too. even pfctl -f
> > > /etc/pf.conf does not change this.
> >
> > This is not very precise.  What happens when you pfctl -f /etc/pf.conf =
?=20
> > Are you sure you can kldload pf?
>
> yes, i am. i even saw, that pf.conf has been loaded. pf -sA doesn't show
> anymore filters & rules, i have to select pfctl -s all - then i see the
> rules.

If you meant to say "pfctl -sA", that shows Anchors not "filters & rules". =
=20
"pfctl -s rules" is what you want.

> > > does somebody have the same? or does somebody know how to correct?
> >
> > Are you, by chance, using a custom kernel without INET6?  In that case
> > trying to kldload pf will error out on the console.  To build the pf
> > module without INET6 you need to define NO_INET6 in make.conf while
> > building pf.ko.  Also make sure you have bpf in your kernel.
>
> I tried also using ipv6 support, but still no hope, pf is not loaded on
> bootup.

After booting try (as root):
# /etc/rc.d/pf rcvar
# /etc/rc.d/pf status
# /etc/rc.d/pf start

and watch the console (#dmesg -a) for error messages.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1176758.KXNgfrnXcG
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQBDXPePXyyEoT62BG0RAhERAJ9szQCRg3uF2GjTg0gZbcm138I6mgCeOEkL
4ZYaD9blWRlNwDEZFs1mkO8=
=D6wB
-----END PGP SIGNATURE-----

--nextPart1176758.KXNgfrnXcG--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200510241702.39502.max>