Re: No ipf in RPI2 evbarm 7.0.2 kernel?

[Paul Goyette <paul%whooppee.com@localhost>]

Oh, do you have a modstat(8) image?  just run modstat and see if the ipf 
module is built-in/present


On Thu, 5 Jul 2018, Emilian Bold wrote:

> I don't have a `config` binary in my  NetBSD 7.0.2 (RPI2)
>
> --emi
>
>
> On Thu, Jul 5, 2018 at 5:59 AM, Scott Burns <Scott.Burns%seqent.com@localhost> wrote:
> > Can you try:
> >
> > config -x | grep -i 'ipf'
> >
> > and post output?
> >
> > Scott
> >
> > -----Original Message-----
> > From: port-arm-owner%NetBSD.org@localhost [mailto:port-arm-owner%NetBSD.org@localhost] On Behalf
> > Of Christos Zoulas
> > Sent: Wednesday, July 04, 2018 10:48 PM
> > To: port-arm%netbsd.org@localhost
> > Subject: Re: No ipf in RPI2 evbarm 7.0.2 kernel?
> >
> > In article
> > <CAL6R17B2fs=Cp7mBz6A44EH49vQve4VZnEykVwxYZeGFb1TAGQ%mail.gmail.com@localhost>,
> > Emilian Bold  <emilian.bold%gmail.com@localhost> wrote:
> > > Hello,
> > >
> > > I can't get ipf to work. I never used ipf before so perhaps I'm doing
> > > something wrong.
> > >
> > > In rc.conf
> > >
> > > ipfilter=YES
> > > ipmon=YES
> > >
> > > but it doesn't seem to start properly:
> > >
> > > # ipfstat
> > > open(IPSTATE_NAME): Device not configured # ipmon
> > > /dev/ipl: open: Device not configured
> > >
> > > Manually I also get an error:
> > >
> > > # service ipfilter start
> > > Enabling ipfilter.
> > > 0:open device: Device not configured
> > > 0:SIOCFRENB: Bad file descriptor
> > > open device: Device not configured
> > > User/kernel version check failed
> > > open device: Device not configured
> > > User/kernel version check failed
> > > 0:1:ioctl(add/insert rule)
> > >
> > > # uname -a
> > > NetBSD netbsd 7.0.2 NetBSD 7.0.2 (RPI2) #0: Mon Dec 19 22:31:19 UTC
> > > 2016  root@netbsd:/usr/obj/sys/arch/evbarm/compile/RPI2 evbarm
> > >
> > > I've also looked if there is perhaps some module for this and I see
> > > that modload is restricted:
> > >
> > > # modload a
> > > modload: Operation not permitted
> > >
> > > Would appreciate any hints on how to get ipf running.
> >
> > What's the securelevel?
> > $ sysctl -a | grep securelevel
> >
> > christos
>
> !DSPAM:5b3d8ab719241510878582!

+------------------+--------------------------+----------------------------+
| Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:          |
| (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee dot com   |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd dot org |
+------------------+--------------------------+----------------------------+