it seems I can not add pipes with releng6 sources from the last days ipfw add pipe 1 ip from any to any ipfw: getsockopt(IP_FW_ADD): Invalid argument or any similar add pipe command does not work (sure I have options DUMMYNET in kernel) world and kernel from march 29 works still fine anything changed? -- Jo?o A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura. Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
At 10:07 AM 4/1/2007, JoaoBR wrote:>it seems I can not add pipes with releng6 sources from the last days > >ipfw add pipe 1 ip from any to any >ipfw: getsockopt(IP_FW_ADD): Invalid argument > >or any similar add pipe command does not work >(sure I have options DUMMYNET in >kernel) > >world and kernel from march 29 works still fine > >anything changed?There were a bunch of MFCs. When I try from a kernel today, [smicro1U]# ipfw pipe 3 config bw 512Kb [smicro1U]# ipfw pipe show 00003: 512.000 Kbit/s 0 ms 50 sl. 0 queues (1 buckets) droptail [smicro1U]# [smicro1U]# ipfw add 1 pipe 3 ip from 10.0.0.0/8 to any ipfw: getsockopt(IP_FW_ADD): Invalid argument [smicro1U]# [smicro1U]# dmesg | tail -1 ipfw: opcode 50 size 2 wrong [smicro1U]#>-- > >Jo?o > > > > > > > >A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura. >Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br >_______________________________________________ >freebsd-stable@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-stable >To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
At 10:07 AM 4/1/2007, JoaoBR wrote:>it seems I can not add pipes with releng6 sources from the last days > >ipfw add pipe 1 ip from any to any >ipfw: getsockopt(IP_FW_ADD): Invalid argumentI think this is whats needed in /usr/src/sbin/ipfw. Looking at the diffs between HEAD and RELENG_6 (apart from the kernel nat stuff), below seems to be whats different. [smicro1U]# diff -u ipfw2.c.orig ipfw2.c --- ipfw2.c.orig Mon Apr 2 22:28:33 2007 +++ ipfw2.c Mon Apr 2 22:30:45 2007 @@ -3973,11 +3973,9 @@ break; case TOK_QUEUE: - action->len = F_INSN_SIZE(ipfw_insn_pipe); action->opcode = O_QUEUE; goto chkarg; case TOK_PIPE: - action->len = F_INSN_SIZE(ipfw_insn_pipe); action->opcode = O_PIPE; goto chkarg; case TOK_SKIPTO: @@ -4043,11 +4041,13 @@ "illegal forwarding port ``%s''", s); p->sa.sin_port = (u_short)i; } - lookup_host(*av, &(p->sa.sin_addr)); - } + if (_substrcmp(*av, "tablearg") == 0) + p->sa.sin_addr.s_addr = INADDR_ANY; + else + lookup_host(*av, &(p->sa.sin_addr)); ac--; av++; break; - + } case TOK_COMMENT: /* pretend it is a 'count' rule followed by the comment */ action->opcode = O_COUNT; [smicro1U]# The command seems to be getting tripped up in /usr/src/sys/netinet/ip_fw2.c case O_QUEUE: if (cmdlen != F_INSN_SIZE(ipfw_insn)) goto bad_size; goto check_action; where size=2 and cmdlen=1 on opcode=50 ---Mike
JoaoBR wrote:> it seems I can not add pipes with releng6 sources from the last days > > ipfw add pipe 1 ip from any to any > ipfw: getsockopt(IP_FW_ADD): Invalid argument > > or any similar add pipe command does not work (sure I have options DUMMYNET in > kernel) > > world and kernel from march 29 works still fineCan you test this patch? http://lists.freebsd.org/pipermail/freebsd-ipfw/2007-April/002898.html -- WBR, Andrey V. Elsukov