On Mon, 16 Dec 2002, Ruslan Ermilov wrote:
> On Sat, Dec 14, 2002 at 02:09:13PM -0800, Matthew Dillon wrote: > > > > : > > :On Sat, Dec 14, 2002 at 12:38:13PM -0800, Matthew Dillon wrote: > > :> then, as usual, IPFW with the new kernel and > > :> old world fails utterly and now the fragging machine can't access the > > : > > :Hear hear!! I am >< tempted to have /sbin/ipfw moved to src/sys. > > > > How about something like this (patch enclosed). If there are no > > objections I will commit it along with a documentation update, and > > maybe also add some RC code give the sysad a chance to ipfw unbreak if > > ipfw otherwise fails during the boot sequence. > > > Matt, > > How this could be helpful in a remote upgrade scenario that has > IPFW ABI incompatibility issues? > > One alternative approach would be to not compile IPFW into a > kernel but rather have it loaded as a module. Then, you > install new kernel, edit out ipfw_enable="YES" for the time > being, reboot with the new kernel, installworld, edit > ipfw_enable="YES" back in, reboot, and you're done. I think having ipfw as a module doesn't get you fwd or divert. (I may be wrong) > > > Cheers, > -- > Ruslan Ermilov Sysadmin and DBA, > [EMAIL PROTECTED] Sunbay Software AG, > [EMAIL PROTECTED] FreeBSD committer, > +380.652.512.251 Simferopol, Ukraine > > http://www.FreeBSD.org The Power To Serve > http://www.oracle.com Enabling The Information Age > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
