Re: NPF on raspberry pi 2

[Pongthep Kulkrisada <ptkrisada%gmail.com@localhost>]

* Yves Bovard (ybovard%gmail.com@localhost) wrote:
> It isn't a stupid question! The device doesn't exist. How can I create it,
> or who creates it? I first thought that "npfctl reload" or "npfctl start"
> will create this device but both complain that /dev/npf doesn't exist
> 
> Yves
> 
> Le dim. 20 déc. 2015 01:24, Andy Ruhl <acruhl%gmail.com@localhost> a écrit :
> 
> > On Dec 19, 2015 4:38 PM, "Yves Bovard" <ybovard%gmail.com@localhost> wrote:
> > >
> > > Hello everybody!
> > >
> > > I try to use NPF with NetBSD 7 on a raspberry pi 2. I am facing the
> > following error:
> > >
> > > myserver# npfctl validate
> > > npfctl: cannot open '/dev/npf': Device not configured
> >
> > Possibly a stupid question (from me), but does the npf device exist?
> >
> > Andy
> >

I don't know RPI, but this works with 7.0 on my amd64.

Add these 2 lines in /etc/rc.conf
npf=YES
npf_rules="/etc/npf.conf"

Create /etc/ifconfig.npflog0 containing only this line.
create

As root...
# modload npf
# cd /dev
# sh MAKEDEV npf
# modload npf_ext_log
# modload npf_ext_normalize
# ifconfig npflog0 create
# npfctl reload
# npfctl start

For permanent configuration, add these lines in /boot.cfg.
load=npf
load=npf_ext_log
load=npf_ext_normalize

Last of all, disable PF.
As NPF and PF are mutual exclusive.

-- 
Pongthep Kulkrisada
 
"UNIX is basically a simple operating system,
but you have to be a genius to understand the simplicity."
-- Dennis M. Ritchie