From owner-freebsd-stable@FreeBSD.ORG Sat Sep 20 12:12:35 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2D7F116A4B3 for ; Sat, 20 Sep 2003 12:12:35 -0700 (PDT) Received: from imf25aec.mail.bellsouth.net (imf25aec.mail.bellsouth.net [205.152.59.73]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4BC2E43FCB for ; Sat, 20 Sep 2003 12:12:34 -0700 (PDT) (envelope-from frank_s@bellsouth.net) Received: from Cat.nina.org ([216.78.160.93]) by imf25aec.mail.bellsouth.netESMTP <20030920191233.KSFM10992.imf25aec.mail.bellsouth.net@Cat.nina.org> for ; Sat, 20 Sep 2003 15:12:33 -0400 Date: Sat, 20 Sep 2003 15:12:32 -0400 (EDT) From: Frank Seltzer X-X-Sender: frank_s@Cat.nina.org To: freebsd-stable@freebsd.org Message-ID: <20030920150310.B190@Cat.nina.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: xl0 not responding X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Sep 2003 19:12:35 -0000 I just upgraded to 4.9-PRERELEASE on my gateway box. After rebooting, I can no longer ping or ssh into it nor will it pass packets. If I put the interface into promiscuous mode using tcpdump -i xl0, it works fine. >From rc.conf: gateway_enable="YES" firewall_enable="YES" firewall_type="OPEN >From $KERNCONF: options IPDIVERT options IPFIREWALL ipfw list says: 00050 divert 8668 ip from any to any via rl0 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00300 deny ip from 127.0.0.0/8 to any 65000 allow ip from any to any 65535 deny ip from any to any ifconfig xl0: xl0: flags=8943 mtu 1500 options=3 inet 10.0.0.2 netmask 0xff000000 broadcast 10.255.255.255 inet6 fe80::201:2ff:feed:432c%xl0 prefixlen 64 scopeid 0x1 ether 00:01:02:ed:43:2c media: Ethernet autoselect (100baseTX ) status: active Anyone have an idea what is wrong? Frank -- "We will not tire, we will not falter, we will not fail." - George W. Bush