From owner-freebsd-hackers Sun Feb 18 11:07:55 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id LAA28335 for hackers-outgoing; Sun, 18 Feb 1996 11:07:55 -0800 (PST) Received: from eldorado.net-tel.co.uk (eldorado.net-tel.co.uk [193.122.171.253]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id LAA28327 for ; Sun, 18 Feb 1996 11:07:49 -0800 (PST) From: Andrew.Gordon@net-tel.co.uk Received: (from root@localhost) by eldorado.net-tel.co.uk (8.6.12/8.6.10) id TAA25702 for hackers@FreeBSD.ORG; Sun, 18 Feb 1996 19:07:08 GMT X400-Received: by mta "eldorado" in "/PRMD=net-tel/ADMD=gold 400/C=gb/"; Relayed; Sun, 18 Feb 96 19:03:03 +0000 X400-Received: by mta "net-tel cambridge" in "/PRMD=net-tel/ADMD=gold 400/C=gb/"; Relayed; Sun, 18 Feb 96 19:03:01 +0000 X400-Received: by "/PRMD=NET-TEL/ADMD=Gold 400/C=GB/"; Relayed; Sun, 18 Feb 96 19:03:01 +0000 X400-MTS-Identifier: ["/PRMD=NET-TEL/ADMD=Gold 400/C=GB/";hst:2350-960218190301-5002] X400-Content-Type: P2-1984 (2) X400-Originator: Andrew.Gordon@net-tel.co.uk Original-Encoded-Information-Types: IA5-Text X400-Recipients: hackers@FreeBSD.ORG Date: Sun, 18 Feb 96 19:03:01 +0000 Content-Identifier: ppp packet filte Message-Id: <"arg-home2.net-te-0218190447-7BDC*/G=Andrew/S=Gordon/O=Net-Tel Computer Systems Ltd/PRMD=Net-Tel/ADMD=Gold 400/C=GB/"@MHS> To: hackers@FreeBSD.ORG Subject: ppp packet filter syntax changed? Sender: owner-hackers@FreeBSD.ORG Precedence: bulk I just tried upgrading one of our systems from 2.0.5 to 2.1.0R, and found that the packet filter rules we were using in /etc/ppp/ppp.conf didn't work anymore. In particular, a command such as: set ifilter 0 0/0 0/0 tcp estab which works on 2.0.5, has NO EFFECT now - it doesn't even set the rule to the wrong thing, it just leaves you with no rule at all (hence disabling all the other rules if you happened to do this at rule 0). There seem to have been a few changes in src/usr.sbin/ppp/filter.c from 2.0.5 to 2.1.0, mostly looking like they intend to allow ports to be specified by name rather than by number (the only change between 2.1.0R and -current is to fix a printf). Before I wade in and try to debug, has there been a deliberate change to the syntax that has rendered my configuration file obsolete, or is there simply a bug here?