Subject: kern/24969: /usr/sbin/ipfs from ipfilter 4.1.1 does not work
To: None <gnats-bugs@gnats.NetBSD.org>
From: None <arto@selonen.org>
List: netbsd-bugs
Date: 03/30/2004 11:00:08
>Number:         24969
>Category:       kern
>Synopsis:       /usr/sbin/ipfs from ipfilter 4.1.1 does not work
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Mar 30 11:01:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Arto Selonen
>Release:        -current (1.6ZL from ~March 29th)
>Organization:
>Environment:
NetBSD blah 1.6ZL NetBSD 1.6ZL (BLAH) #30: Mon Mar 29 10:07:04 EEST 2004  blah@blah:/obj/sys/arch/i386/compile/BLAH i386

>Description:
Trying to run "/usr/sbin/ipfs -W", as in shutdown if ipfs=YES, produces
an error instead of expected files. This is what I get:

# /usr/sbin/ipfs -W
state:SIOCSTGET: Bad address
Exit 1

# ls -la /var/db/ipf/
total 1
drwx------  2 root  wheel  512 Mar 29 13:06 .
drwxr-xr-x  9 root  wheel  512 Mar 30 13:16 ..
-rw-------  1 root  wheel    0 Mar 30 13:51 ipstate.ipf

Thus, ipfilter state information is not kept through reboots, etc
(as they did with previous ipfilter version [3.4.29?]).

With verbose output, I get:
# /usr/sbin/ipfs -v -W
Turn lock on
Lock now on
Getting state from addr 0x0
state:SIOCSTGET: Bad address
Turn lock off
Lock now off
Exit 1

>How-To-Repeat:
Set 'ipfs=YES' in rc.conf
Run '/etc/rc.d/ipfs stop', or '/usr/sbin/ipfs -W'
>Fix:
/
>Release-Note:
>Audit-Trail:
>Unformatted: