RE: ioctl(SIOCIPFL6): Invalid argument

"Jeffrey D. Brower" <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Organization Green Visor, Inc
Message-ID <16108_1241714160_4A030DF0_16108_9251_1_AB416B3B8A0B4DE399EF917551B6DB3F@warpcore>
I found the (add/insert rule):File exists problem.  I had duplicate rules in
the ruleset!

I still get the SIOCIPFL6 problem.  I suspect it is a problem with IPv6.
When I did the build world on this box I disabled IPv6 and I suspect that
something in IPFilter is trying to use it - but darned if I can figure out
where.  Any thoughts?  What can I supply to you guys that might help you
help me?

--  Jeff
 

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Jeffrey D. Brower
Sent: Wednesday, May 06, 2009 9:46 PM
To: [email protected]
Subject: ioctl(SIOCIPFL6): Invalid argument

Greetings all!

I am building a new FreeBSD box for a firewall.  The last one was running
3.4.31 so I guess it was time.  <grin>

I get this set of messages (new to me) when I am booting:

	Enabling ipfilter
	361:ioctl(add/insert rule):File exists
	423:ioctl(add/insert rule):File exists
	703:ioctl(add/insert rule):File exists
	1:ioctl(add/insert rule):File exists
	ioctl(SIOCIPFL6): Invalid argument
	Installing NAT rules.
	0 entries flushed from NAT table
	0 entries flushed from NAT list

I am concerned that lines 2 through 6 are errors, but my attention is
obviously drawn to the last one of the set of errors since it says "Invalid
argument".  I can't find this on the list and Google was not my friend, so I
thought I would ask you fine folks if my ship was sinking.

What exactly is ipfilter telling me, do I need to be worried and what can I
do to get a clean boot?

Thanks for your help!

--  Jeff
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.