>Number:         18586
>Category:       kern
>Synopsis:       ipf problems
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Tue Oct 08 07:33:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     solics
>Release:        NetBSD 1.6I (1.516 2002/10/05 16:02:39)
>Organization:
none
>Environment:
System: NetBSD live.romtelenet.org 1.6I NetBSD 1.6I (solics) #1: Tue Oct 8 14:59:59 EEST 2002 root@live.romtelenet.org:/usr/src/sys/arch/i386/compile/solics i386
Architecture: i386
Machine: i386
>Description:
can not activate/use ipf

relevant kernel configuration:
bash-2.05# cat solics | grep -E 'INET|PFIL|bpf|^ex|bmtphy|ipfilter' | grep -v '^#'
options         INET            # IP + ICMP + TCP + UDP
options         INET6           # IPV6
options         PPP_FILTER      # Active filter support for PPP (requires bpf)
options         PFIL_HOOKS      # pfil(9) packet filter hooks
options         IPFILTER_LOG    # ipmon(8) log support
ex*     at pci? dev ? function ?        # 3Com 90x[BC]
bmtphy* at mii? phy ?                   # Broadcom BCM5201 and BCM5202 PHYs
exphy*  at mii? phy ?                   # 3Com internal PHYs
pseudo-device   bpfilter        8       # Berkeley packet filter
pseudo-device   ipfilter                # IP filter (firewall) and NAT
bash-2.05# 



bash-2.05# ktrace -i -d ipf -y
SIOCFRSYN: Operation not supported by device

relevant kdump results:
  943 ipf      CALL  open(0x804e1da,0x2,0x480ef754)
  943 ipf      NAMI  "/dev/ipl"
  943 ipf      RET   open 3
  943 ipf      CALL  ioctl(0x3,_IOW('r',0x49,0x4),0xbfbfb760)
  943 ipf      RET   ioctl -1 errno 19 Operation not supported by device

postinstall check/fix executed and devices were remade 

bash-2.05# ls -al ip*
crw-------  1 root  wheel  44, 3 Oct  8 17:28 ipauth
crw-------  1 root  wheel  44, 0 Oct  8 17:28 ipl
crw-------  1 root  wheel  44, 1 Oct  8 17:28 ipnat
crw-------  1 root  wheel  44, 2 Oct  8 17:28 ipstate
bash-2.05# rm -Rf ip*
bash-2.05# ./MAKEDEV ipl
bash-2.05# ls -al ip*
crw-------  1 root  wheel  44, 3 Oct  8 17:29 ipauth
crw-------  1 root  wheel  44, 0 Oct  8 17:29 ipl
crw-------  1 root  wheel  44, 1 Oct  8 17:29 ipnat
crw-------  1 root  wheel  44, 2 Oct  8 17:29 ipstate
bash-2.05# cat MAKEDEV | head -3 | tail -1
#       $NetBSD: MAKEDEV,v 1.182 2002/10/04 18:53:33 elric Exp $
bash-2.05# 

>How-To-Repeat:
see above
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: