ipfw weirdness after csup/buildworld

2010-04-01 Thread Tim Gustafson
I am running: FreeBSD 8.0-STABLE amd64

After recently csup'ing to the latest sources and then a build/install cycle, 
my ipfw started misbehaving badly.  I'm seeing lots of:

ipfw: install_state: entry already present, done

and also lots of:

ipfw: ouch!, skip past end of rules, denying packet

When I did an ipfw list, I got something like this:

0  ip from any to any

Note the rule number is all zeros, and there's no allow or deny.  Adding 
rules or removing rules didn't fix anything, nor did an ipfw flush.  Once it 
was in that state, attempting to kldunload ipfw caused the system to hang.  
The only fix for now was to disable the firewall.

When I went into single user mode, and did:

kldload ipfw
ipfw /etc/firewall.rules (which is the same ruleset I had loaded on boot)

everything worked fine, but when I went into multi-user mode and did the same 
thing, it failed with the symptoms listed above.

Just to be sure, a day after this started happening I did a csup again and 
another build/install cycle but got exactly the same results.

Any ideas?

Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
t...@soe.ucsc.edu
831-459-5354

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: ipfw weirdness after csup/buildworld

2010-04-01 Thread Terrence Koeman
I've seen the same, see: http://forums.freebsd.org/showthread.php?p=75765

--
Regards,
T. Koeman, MTh/BSc/BPsy; Technical Monk

MediaMonks B.V. (www.mediamonks.com)
Please quote all replies in correspondence.


 -Original Message-
 From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-
 questi...@freebsd.org] On Behalf Of Tim Gustafson
 Sent: Thursday, April 01, 2010 7:12 PM
 To: freebsd-questions@freebsd.org
 Subject: ipfw weirdness after csup/buildworld

 I am running: FreeBSD 8.0-STABLE amd64

 After recently csup'ing to the latest sources and then a build/install
 cycle, my ipfw started misbehaving badly.  I'm seeing lots of:

 ipfw: install_state: entry already present, done

 and also lots of:

 ipfw: ouch!, skip past end of rules, denying packet

 When I did an ipfw list, I got something like this:

 0  ip from any to any

 Note the rule number is all zeros, and there's no allow or deny.
 Adding rules or removing rules didn't fix anything, nor did an ipfw
 flush.  Once it was in that state, attempting to kldunload ipfw
 caused the system to hang.  The only fix for now was to disable the
 firewall.

 When I went into single user mode, and did:

 kldload ipfw
 ipfw /etc/firewall.rules (which is the same ruleset I had loaded on
 boot)

 everything worked fine, but when I went into multi-user mode and did
 the same thing, it failed with the symptoms listed above.

 Just to be sure, a day after this started happening I did a csup again
 and another build/install cycle but got exactly the same results.

 Any ideas?

 Tim Gustafson
 Baskin School of Engineering
 UC Santa Cruz
 t...@soe.ucsc.edu
 831-459-5354

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-
 unsubscr...@freebsd.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org