Hi All, Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. The ipfilter implementation in the 6-STABLE kernel errs on the commands sent by the 5.4 ipf binary. This can be an issue when you are upgrading remotely without serial console and you have IPFILTER_DEFAULT_BLOCK enabled: after rebooting in the 6-STABLE kernel no firewall rules will be loaded and you cannot access the box anymore to make installworld.. Best, Koen
On Friday 23 December 2005 11:12, Koen Martens wrote:> Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. > The ipfilter implementation in the 6-STABLE kernel errs on the commands > sent by the 5.4 ipf binary. This can be an issue when you are upgrading > remotely without serial console and you have IPFILTER_DEFAULT_BLOCK > enabled: after rebooting in the 6-STABLE kernel no firewall rules will > be loaded and you cannot access the box anymore to make installworld..Just wondering - is COMPAT5X in the kernel? -- Melvyn Sopacua freebsd.stable@melvyn.homeunix.org FreeBSD 6.0-STABLE Qt: 3.3.5 KDE: 3.4.3
Melvyn Sopacua wrote:>On Friday 23 December 2005 11:12, Koen Martens wrote: > > > >>Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. >>The ipfilter implementation in the 6-STABLE kernel errs on the commands >>sent by the 5.4 ipf binary. This can be an issue when you are upgrading >>remotely without serial console and you have IPFILTER_DEFAULT_BLOCK >>enabled: after rebooting in the 6-STABLE kernel no firewall rules will >>be loaded and you cannot access the box anymore to make installworld.. >> >> > >Just wondering - is COMPAT5X in the kernel? > >Well, COMPAT_FREEBSD5 is.. Koen
On Friday 23 December 2005 14:51, Koen Martens wrote:> Melvyn Sopacua wrote: > >On Friday 23 December 2005 11:12, Koen Martens wrote: > >>Just a smallish issue with ipfilter and upgrading from 5.4 to 6-STABLE. > >>The ipfilter implementation in the 6-STABLE kernel errs on the commands > >>sent by the 5.4 ipf binary. This can be an issue when you are upgrading > >>remotely without serial console and you have IPFILTER_DEFAULT_BLOCK > >>enabled: after rebooting in the 6-STABLE kernel no firewall rules will > >>be loaded and you cannot access the box anymore to make installworld.. > > > >Just wondering - is COMPAT5X in the kernel? > > Well, COMPAT_FREEBSD5 is..Sounds like a note for UPDATING then :) -- Melvyn Sopacua freebsd.stable@melvyn.homeunix.org FreeBSD 6.0-STABLE Qt: 3.3.5 KDE: 3.4.3