Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Aug 1998 20:02:33 -0500
From:      Alex Nash <nash@mcs.net>
To:        Jeff Kletsky <Jeff@Wagsky.com>, freebsd-stable@FreeBSD.ORG
Subject:   Re: Increasing IP_FW_MAX_PORTS seems to fail
Message-ID:  <19980817200233.R169@pr.mcs.net>
In-Reply-To: <l03110702b1fe4679e025@[192.168.6.3]>; from Jeff Kletsky on Mon, Aug 17, 1998 at 03:45:49PM -0700
References:  <l03110702b1fe4679e025@[192.168.6.3]>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Aug 17, 1998 at 03:45:49PM -0700, Jeff Kletsky wrote:
> After editing /usr/src/sys/netinet/ip_fw.h to reflect the increased number
> of ports (16 attempted from original 10) and examining the .depend files
> the following were 'make; make install'-ed:
> 
> /usr/src/sbin/ipfw
> /usr/src/lkm/ipfw
> (full kernel build and install)
> 
> Upon reboot, ipfw does not function, with the error message:
> 
> ip_fw_ctl: len=104, want 116
> 
> (somewhat confusing since ip_fw.h says:
> * Warning: setsockopt() will fail if sizeof(struct ip_fw) > MLEN (108)
[...]
> What am I missing?

The ipfw binary you built includes /usr/include/netinet/ip_fw.h, I
suspect your changes haven't made it there.

You should probably heed the warning about setsockopt() failing for
sizeof(struct ip_fw) > 108 bytes -- this restriction is removed in
-current but not in -stable.

Consider using multiple rules instead.

Alex

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980817200233.R169>