Subject: Re: ipfilter and ipnat broken
To: None <current-users@NetBSD.org>
From: Matthias Scheler <tron@zhadum.de>
List: current-users
Date: 04/19/2004 18:49:31
In article <BAY12-F45aNgEpTX5V3000481aa@hotmail.com>,
	"Paul Higgins" <phiggssx@hotmail.com> writes:
> On netbsd -current 2.0C sparc64 built a few hours ago, ...

Did you rebuild kernel and userland or just the kernel? The later might
not work.

> ... ipnat and ipfilter are completely broken.
> 
> # /etc/rc.d/ipnat reload
> 0 entries flushed from NAT list
> 2:ioctl(add/insert nat rule): Invalid argument
> 2:ioctl(add/insert nat rule): Invalid argument
> 2:ioctl(add/insert nat rule): Invalid argument
> 3:ioctl(add/insert nat rule): Invalid argument
> 
> ipfilter can't parse it's config file due to syntax errors.
> 
> Any help would be greatly appreciated.

Posting the rules would be a good start. IP Filter 4.x is checking the
configuration file syntax more strictly.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/