Re: ioctl(SIOCIPFL6): Invalid argument

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <9807_1242163915_4A09EACB_9807_134_1_4A09EA60.2030405@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Jeffrey D. Brower wrote:
| Greetings all!
|
| I am building a new FreeBSD box for a firewall.  The last one was running
| 3.4.31 so I guess it was time.  <grin>
|
| I get this set of messages (new to me) when I am booting:
|
|     Enabling ipfilter
|     361:ioctl(add/insert rule):File exists
|     423:ioctl(add/insert rule):File exists
|     703:ioctl(add/insert rule):File exists
|     1:ioctl(add/insert rule):File exists
|     ioctl(SIOCIPFL6): Invalid argument
|     Installing NAT rules.
|     0 entries flushed from NAT table
|     0 entries flushed from NAT list
|
| I am concerned that lines 2 through 6 are errors, but my attention is
| obviously drawn to the last one of the set of errors since it says 
"Invalid
| argument".  I can't find this on the list and Google was not my 
friend, so I
| thought I would ask you fine folks if my ship was sinking.
|
| What exactly is ipfilter telling me, do I need to be worried and what 
can I
| do to get a clean boot?

I think what IPFilter is telling you is that /etc/rc.d/ipfilter runs 
various ipfilter
commands with the -6 command line option, telling it to do something for
IPv6 but then the kernel rejects it. Try cleaning up that boot script 
and see
how you go...

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkoJ6mAACgkQP7JIXtvLbFWh+ACeJw0z8frHOsUZPMHv47ALIUOf
Q8QAoJuNV1j6Igqf0IvIcFCvJhP1j92/
=4aAf
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.