Skip site navigation (1)Skip section navigation (2)
Date:      16 Jun 2003 21:35:44 -0400
From:      Mike Bohan <bogin@shortcircut.org>
To:        freebsd-current@freebsd.org
Subject:   -E flag in /etc/rc.d/ipfilter causes warnings
Message-ID:  <1055813744.18453.21.camel@diesel>

next in thread | raw e-mail | index | archive | help

--=-u7IW3qhkzmGjuoY5s0ej
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hello there,

	I recently ran into a slight issue with ipfilter running on
5.1-RELEASE.  My machine serves the simple purpose as a nat gateway, so
ipfilter is always going to be necessary on it.  Due to this fact, i
decided to  include options IPFILTER in the kernel config, instead of
dynamically loading the ipl.ko module.  However, when ipfilter is used
in the kernel image, it's automatically initialized (and thus does not
need the -E flag).  This has been noted in rc.conf for some time, and I
of course removed the -E from the     =20
ipfilter_flags variable in that file.  However, after booting my kernel
with the IPFILTER options, I noticed warnings in my kernel logs that
"ipfilter has already been initialized", which is consistent with using
flag -E when ipf is already initialized.  After some brief analysis, I
discovered that /etc/rc.d/ipfilter actually uses -E in the shell script
function, ipfilter_start(). After removing the two instances of the -E
and rebooting, the warning messages disappeared at boot time.  Is this a
known glitch in the hopes that people start soley using the ipl kernel
module? It's really not a big deal either way, but I was more just
curious than anything in which direction it's going.  Thanks in advance!

--=20
Mike Bohan <bogin@shortcircut.org>


--=-u7IW3qhkzmGjuoY5s0ej
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA+7nBwejdihSuinPURAiO5AJ0ZI2AGKKXus9T/nATueOax8+bOuACdHnV3
jAlWrGnUJRDs8bf1qoDW264=
=Vd/R
-----END PGP SIGNATURE-----

--=-u7IW3qhkzmGjuoY5s0ej--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1055813744.18453.21.camel>