Bob Willcox
2010-Feb-26  19:31 UTC
ipfw & natd with recent MFC of firewall_coscripts functionality
I just updated my gateway machine to 7.3-PRERELEASE and immediately noticed
that natd no longer started (hard to miss, no outside network access).
It looks like the MFC of the firewall_coscripts function may be the cause
(cvs rev 1.15.2.3 to /usr/src/etc/rc.d/ipfw). These changes add the two lines
(along with other stuff):
...
                       ${_coscript} quietstart
...
                       ${_coscript} quietstop
...
I believe the problem is that neither "quietstart" or
"quietstop" are
recognized as valid arguments in by /etc/rc.d/natd so natd isn't started.
Further, my hunch is that by removing the "quiet" prefix it will work
(I'm
reluctant to try this at the moment as I am remote).
Bob
-- 
Bob Willcox             The shifts of Fortune test the reliability of friends.
bob@immure.com                -- Marcus Tullius Cicero
Austin, TX
hizel
2010-Mar-01  17:40 UTC
ipfw & natd with recent MFC of firewall_coscripts functionality
Hi. Similar problem. Now updated to 7.3-PRERELEASE. rc script natd said he did not know parameter quietstart. Now migrate to use kernel nat.
Bob Willcox
2010-Mar-01  21:26 UTC
ipfw & natd with recent MFC of firewall_coscripts functionality
On Mon, Mar 01, 2010 at 08:24:54PM +0300, hizel wrote:> Hi. Similar problem. Now updated to 7.3-PRERELEASE. rc script natd said he did not know parameter quietstart. Now migrate to use kernel nat.I was able to confirm that simply changing "quietstart" and "quietstop" in the /etc/rc.d/ipfw script to "start" and "stop", respectively, fixes the problem.> _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"-- Bob Willcox The shifts of Fortune test the reliability of friends. bob@immure.com -- Marcus Tullius Cicero Austin, TX
Jeremy Chadwick
2010-Mar-01  21:30 UTC
ipfw & natd with recent MFC of firewall_coscripts functionality
On Mon, Mar 01, 2010 at 03:25:54PM -0600, Bob Willcox wrote:> On Mon, Mar 01, 2010 at 08:24:54PM +0300, hizel wrote: > > Hi. Similar problem. Now updated to 7.3-PRERELEASE. rc script natd said he did not know parameter quietstart. Now migrate to use kernel nat. > > I was able to confirm that simply changing "quietstart" and "quietstop" in the > /etc/rc.d/ipfw script to "start" and "stop", respectively, fixes the problem.Adding committer + submitter + those who reviewed the change/commit to the CC list: http://www.freebsd.org/cgi/cvsweb.cgi/src/etc/rc.d/ipfw -- | Jeremy Chadwick jdc@parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |