Re: No ipf in RPI2 evbarm 7.0.2 kernel?

[Emilian Bold <emilian.bold%gmail.com@localhost>]

`modstat | grep ipf` gives me nothing.

I do have about 50 builtin modules (see bellow).

I didn't build the kernel by myself, it's just a standard NetBSD download.

$ modstat
NAME             CLASS      SOURCE     REFS  ADDRESS          SIZE     REQUIRES
aio              misc       builtin    0     0                -        -
au8522           driver     builtin    1     0                -        i2cexec
auvitek          driver     builtin    0     0                -
au8522,xc5k
bpf              driver     builtin    7     0                -        -
cir              driver     builtin    1     0                -        ir
compat           exec       builtin    1     0                -        -
compat_netbsd32  exec       builtin    0     0                -
compat,exec_elf32
coredump         misc       builtin    0     0                -        -
dtv              driver     builtin    0     0                -        -
dtv_math         misc       builtin    1     0                -        -
emdtv            driver     builtin    0     0                -
cir,lg3303,xc3028
exec_elf32       exec       builtin    1     0                -        -
exec_script      exec       builtin    0     0                -        -
ext2fs           vfs        builtin    0     0                -        ffs
extensions       secmodel   builtin    1     0                -        -
ffs              vfs        builtin    2     0                -        -
gpio             driver     builtin    0     0                -        -
i2cexec          misc       builtin    4     0                -        -
if_athn_usb      driver     builtin    0     0                -        bpf
if_axe           driver     builtin    0     0                -        bpf
if_axen          driver     builtin    0     0                -        bpf
if_rum           driver     builtin    0     0                -        bpf
if_run           driver     builtin    0     0                -        bpf
if_urtw          driver     builtin    0     0                -        bpf
if_urtwn         driver     builtin    0     0                -        bpf
iic              driver     builtin    0     0                -        -
ir               driver     builtin    1     0                -        -
irmce            driver     builtin    0     0                -        -
kernfs           vfs        builtin    0     0                -        -
ksem             misc       builtin    0     0                -        -
layerfs          misc       builtin    1     0                -        -
lg3303           driver     builtin    1     0                -
i2cexec,dtv_math
mfs              vfs        builtin    0     0                -        ffs
mqueue           misc       builtin    0     0                -        -
msdos            vfs        builtin    0     0                -        -
nfs              vfs        builtin    0     0                -        -
null             vfs        builtin    0     0                -        layerfs
procfs           vfs        builtin    0     0                -        -
pseye            driver     builtin    0     0                -        -
ptyfs            vfs        builtin    0     0                -        -
puffs            vfs        builtin    0     0                -        putter
putter           driver     builtin    1     0                -        -
secmodel_bsd44   secmodel   builtin    0     0                -
suser,securelevel,extensions
securelevel      secmodel   builtin    1     0                -        -
suser            secmodel   builtin    1     0                -        -
tmpfs            vfs        builtin    0     0                -        -
wapbl            vfs        builtin    0     0                -        -
xc3028           driver     builtin    1     0                -        i2cexec
xc5k             driver     builtin    1     0                -        i2cexec

--emi


On Thu, Jul 5, 2018 at 6:45 AM, Paul Goyette <paul%whooppee.com@localhost> wrote:
> Oh, do you have a modstat(8) image?  just run modstat and see if the ipf
> module is built-in/present
>
>
>
> On Thu, 5 Jul 2018, Emilian Bold wrote:
>
>> I don't have a `config` binary in my  NetBSD 7.0.2 (RPI2)
>>
>> --emi
>>
>>
>> On Thu, Jul 5, 2018 at 5:59 AM, Scott Burns <Scott.Burns%seqent.com@localhost>
>> wrote:
>>>
>>> Can you try:
>>>
>>> config -x | grep -i 'ipf'
>>>
>>> and post output?
>>>
>>> Scott
>>>
>>> -----Original Message-----
>>> From: port-arm-owner%NetBSD.org@localhost [mailto:port-arm-owner%NetBSD.org@localhost] On
>>> Behalf
>>> Of Christos Zoulas
>>> Sent: Wednesday, July 04, 2018 10:48 PM
>>> To: port-arm%netbsd.org@localhost
>>> Subject: Re: No ipf in RPI2 evbarm 7.0.2 kernel?
>>>
>>> In article
>>> <CAL6R17B2fs=Cp7mBz6A44EH49vQve4VZnEykVwxYZeGFb1TAGQ%mail.gmail.com@localhost>,
>>> Emilian Bold  <emilian.bold%gmail.com@localhost> wrote:
>>>>
>>>> Hello,
>>>>
>>>> I can't get ipf to work. I never used ipf before so perhaps I'm doing
>>>> something wrong.
>>>>
>>>> In rc.conf
>>>>
>>>> ipfilter=YES
>>>> ipmon=YES
>>>>
>>>> but it doesn't seem to start properly:
>>>>
>>>> # ipfstat
>>>> open(IPSTATE_NAME): Device not configured # ipmon
>>>> /dev/ipl: open: Device not configured
>>>>
>>>> Manually I also get an error:
>>>>
>>>> # service ipfilter start
>>>> Enabling ipfilter.
>>>> 0:open device: Device not configured
>>>> 0:SIOCFRENB: Bad file descriptor
>>>> open device: Device not configured
>>>> User/kernel version check failed
>>>> open device: Device not configured
>>>> User/kernel version check failed
>>>> 0:1:ioctl(add/insert rule)
>>>>
>>>> # uname -a
>>>> NetBSD netbsd 7.0.2 NetBSD 7.0.2 (RPI2) #0: Mon Dec 19 22:31:19 UTC
>>>> 2016  root@netbsd:/usr/obj/sys/arch/evbarm/compile/RPI2 evbarm
>>>>
>>>> I've also looked if there is perhaps some module for this and I see
>>>> that modload is restricted:
>>>>
>>>> # modload a
>>>> modload: Operation not permitted
>>>>
>>>> Would appreciate any hints on how to get ipf running.
>>>
>>>
>>> What's the securelevel?
>>> $ sysctl -a | grep securelevel
>>>
>>> christos
>>>
>>>
>>
>> !DSPAM:5b3d8ab719241510878582!
>>
>>
>
> +------------------+--------------------------+----------------------------+
> | Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:          |
> | (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee dot com   |
> | Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd dot org |
> +------------------+--------------------------+----------------------------+