From owner-freebsd-questions@FreeBSD.ORG  Mon Nov  8 17:02:12 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8606A16A4CE
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Nov 2004 17:02:12 +0000 (GMT)
Received: from ms-smtp-01-eri0.ohiordc.rr.com
	(ms-smtp-01-smtplb.ohiordc.rr.com [65.24.5.135])
	by mx1.FreeBSD.org (Postfix) with ESMTP id DEA1843D39
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Nov 2004 17:02:11 +0000 (GMT)
	(envelope-from dmehler26@woh.rr.com)
Received: from satellite (dhcp065-031-041-029.woh.rr.com [65.31.41.29])
	iA8H24lv026011	for <freebsd-questions@freebsd.org>;
	Mon, 8 Nov 2004 12:02:07 -0500 (EST)
Message-ID: <000b01c4c5b4$a22ab6f0$0200a8c0@satellite>
From: "dave" <dmehler26@woh.rr.com>
To: <freebsd-questions@freebsd.org>
Date: Mon, 8 Nov 2004 12:01:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Virus-Scanned: Symantec AntiVirus Scan Engine
Subject: ipfilter loading on 5.3
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Nov 2004 17:02:12 -0000

Hello,
    I believe i am having a configuration error. I've got a new 5.3 box to
which i'm atempting to get ipfilter going. I read the updated handbook and
have added:

ipfilter_enable="YES"
ipfilter_rules="/etc/ipf.rules"
ipmon_enable="YES"
ipmon_flags="-Dsvn"

to my rc.conf file. When i try to manually load up my rules file with:
ipf -FA -f /etc/ipf.rules
 i am getting an error "can not open no such device"
I have not compiled anything for ipfilter in to the kernel as i had done
previously i understood from the handbook that ipf was capable of being
dynamically loaded and the rc.conf line would suffice. I've also added:
Local0.* /var/log/ipfilter.log
to my syslog.conf file getting ipf traffic in a separate logfile. When i go
to rotate this file with newsyslog is there any special flags i should pass?
Thanks.
Dave.