Solaris 9, GCC 3.2, Sun-supplied (not GNU) make, IPFilter 3.4.30.

.29 worked fine (compiled from scratch) with this setup.  .30 compiles,
installs fine (I pkgrm'ed .29 first), but when I try to fire it up:

root@ohno:/etc/rc2.d> ./S65ipfboot start
open device: No such file or directory
open device: No such file or directory
ioctl(SIOCIPFFL): Bad file number
constructing minimal name resolution rules...
open device: No such file or directory
1:ioctl(add/insert rule): Bad file number
open device: No such file or directory
ioctl(SIOCIPFFL): Bad file number
open device: No such file or directory
2:ioctl(add/insert rule): Bad file number
3:ioctl(add/insert rule): Bad file number
4:ioctl(add/insert rule): Bad file number
5:ioctl(add/insert rule): Bad file number
6:ioctl(add/insert rule): Bad file number
7:ioctl(add/insert rule): Bad file number
8:ioctl(add/insert rule): Bad file number
9:ioctl(add/insert rule): Bad file number
12:ioctl(add/insert rule): Bad file number
13:ioctl(add/insert rule): Bad file number
14:ioctl(add/insert rule): Bad file number
17:ioctl(add/insert rule): Bad file number
18:ioctl(add/insert rule): Bad file number
19:ioctl(add/insert rule): Bad file number
20:ioctl(add/insert rule): Bad file number
21:ioctl(add/insert rule): Bad file number
22:ioctl(add/insert rule): Bad file number
23:ioctl(add/insert rule): Bad file number
24:ioctl(add/insert rule): Bad file number
25:ioctl(add/insert rule): Bad file number
26:ioctl(add/insert rule): Bad file number
29:ioctl(add/insert rule): Bad file number
32:ioctl(add/insert rule): Bad file number
33:ioctl(add/insert rule): Bad file number
36:ioctl(add/insert rule): Bad file number
37:ioctl(add/insert rule): Bad file number
38:ioctl(add/insert rule): Bad file number
39:ioctl(add/insert rule): Bad file number
42:ioctl(add/insert rule): Bad file number
43:ioctl(add/insert rule): Bad file number
44:ioctl(add/insert rule): Bad file number
45:ioctl(add/insert rule): Bad file number
52:ioctl(add/insert rule): Bad file number
53:ioctl(add/insert rule): Bad file number
54:ioctl(add/insert rule): Bad file number
55:ioctl(add/insert rule): Bad file number
56:ioctl(add/insert rule): Bad file number
59:ioctl(add/insert rule): Bad file number
61:ioctl(add/insert rule): Bad file number
63:ioctl(add/insert rule): Bad file number
65:ioctl(add/insert rule): Bad file number
67:ioctl(add/insert rule): Bad file number
69:ioctl(add/insert rule): Bad file number
71:ioctl(add/insert rule): Bad file number
72:ioctl(add/insert rule): Bad file number
73:ioctl(add/insert rule): Bad file number
76:ioctl(add/insert rule): Bad file number
open device: No such file or directory
ioctl(SIOCSWAPA): Bad file number
open device: No such file or directory
SIOCFRSYN: Bad file number
/dev/ipf: open: No such file or directory

root@ohno:/etc/rc2.d> modinfo |grep ipf
 98  135d791  2b070  75   1  ipf (IP Filter: v3.4.30)

Anybody else have this combination working?  I'll back out to .29 for
now.

Here's my ipf.conf:

# block private address space - this shouldnt be hitting from outside
block in quick on hme0 from 192.168.0.0/24      to any
block in quick on hme0 from 172.16.0.0/12       to any
block in quick on hme0 from 10.0.0.0/8          to any
block in quick on hme0 from 0.0.0.0/8           to any
block in quick on hme0 from 169.254.0.0/16      to any
block in quick on hme0 from 192.0.2.0/24        to any
block in quick on hme0 from 204.152.64.0/23     to any
block in quick on hme0 from 224.0.0.0/3         to any
# prevent smurf attacks
block in quick on hme0 from any to 207.200.6.0/32
block in quick on hme0 from any to 207.200.6.255/32
block in quick on hme0 from 20.20.20.0/24 to any
# block rlogin, rsh, lpd, telnet, X11, syslog, portmap, nfs, snmp
block in quick on hme0 proto tcp from any to 207.200.6.75/32 port = 513
block in quick on hme0 proto tcp from any to 207.200.6.75/32 port = 514
block in quick on hme0 proto tcp from any to 207.200.6.75/32 port = 515
block in quick on hme0 proto tcp from any to 207.200.6.75/32 port = 23
block in quick on hme0 proto tcp from any to 207.200.6.75/32 port = 6000
block in quick on hme0 proto udp from any to 207.200.6.75/32 port = 514
block in quick on hme0 proto tcp/udp from any to 207.200.6.75/32 port = 111
block in quick on hme0 proto tcp/udp from any to 207.200.6.75/32 port = 2049
block in quick on hme0 proto tcp/udp from any to 207.200.6.75/32 port = 161
block in quick on hme0 proto tcp/udp from any to 207.200.6.75/32 port = 162
pass in all

--
bill bradford
[EMAIL PROTECTED]
austin, texas

Reply via email to