Thomas Moestl <[EMAIL PROTECTED]> writes:
> Oh, right, that's related: the kernel checks for a minimum size of the
> passed data on two occasions, first in sooptcopyin(), and then again
> in check_ipfw_struct().
> It the size to be at least sizeof(struct ip_fw), however for
> structures containing just one action (like the one for the command
> above) this is again too much in the 64-bit case because of the
> padding. Can you please try the attached patch (against the CVS
> version)?

Yes, this version works.

%%%
bowie# ipfw show
00100          0          0 allow ip from me to 192.168.3.1
00200          5        484 allow udp from me to 192.168.3.13
00300          0          0 allow tcp from me to 192.168.3.0/24 established
00400          0          0 deny ip from me to 192.168.3.0/24
00500          9        734 allow ip from any to any
65535          0          0 deny ip from any to any
%%%

Best regards,
Mike Barcroft

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to