Re: starting ipfilter in 1.6

In article <[email protected]>,
Byron Servies  <[email protected]> wrote:
>-=-=-=-=-=-
>
>Hi there!
>
>I use a qube2 running 1.5.2 as my gateway/firewall.  This
>weekend I decided to try and upgrade the machine to 1.6,
>since I have been running that on another qube2 with
>success.  I had been running GENERIC, however, and not
>a kernel with GATEWAY and the ipfilter psuedo device
>turned on.
>
>In short, the device is not available.  I suspect that
>the mfs overwriting /dev due to the console not being
>available, but I admit I may be way off base there.
>
>Has anybody run ipfilter on a qube2 under 1.6?
>
>I have attached the diff between GENERIC and the kernel
>config I am using, as well as a boot log.  I have tried
>a number of variations, including lkm, without success
>(the lkm device is not found so modload will not work,
>even after the kernel has booted completely).
>
>Thanks,
>
>Byron
>
>-=-=-=-=-=-
>
>92c92
>< #options 	GATEWAY		# IP packet forwarding
>---
>> options 	GATEWAY		# IP packet forwarding
>122c122
>< config		netbsd	root on ? type ?
>---
>> config		netbsd	root on ? type nfs
>254c254
>< #pseudo-device	ipfilter			# IP filter (firewall) and NAT
>---
>> pseudo-device	ipfilter			# IP filter (firewall) and NAT
>
>-=-=-=-=-=-
>
>Cobalt Microserver Diagnostics - 'We serve it, you surf it'
>Built Wed Mar  3 21:26:25 PST 1999
>
> 1.LCD Test................................PASS
> 2.Controller Test.........................PASS
> 5.Bank 0:.................................64M
> 6.Bank 1:.................................64M
> 7.Bank 2:.................................16M
> 8.Bank 3:.................................0M
> 9.Serial Test.............................PASS
>10.PCI Expansion Slot....................**Unknown Card**
>12.IDE Test................................PASS
>13.Ethernet Test...........................PASS
>16.RTC Test................................PASS
>Decompressing -\|/-\|/-\|/-\| done
>Decompressing -/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\ done.
> [ no symbols available ]
>Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002
>    The NetBSD Foundation, Inc.  All rights reserved.
>Copyright (c) 1982, 1986, 1989, 1991, 1993
>    The Regents of the University of California.  All rights reserved.
>
>NetBSD 1.6_STABLE (GENERIC-FW) #1: Mon Jan 20 16:49:18 PST 2003
>    [email protected]:/usr/src/sys/arch/cobalt/compile/GENERIC-FW
>144 MB memory, 130 MB free, 7472 KB in 1868 buffers
>mainbus0 (root)
>com0 at mainbus0 addr 0x1c800000 level 3: st16650a, working fifo
>com0: console
>cpu0 at mainbus0: QED RM5200 CPU (0x28a0) Rev. 10.0 with built-in FPU Rev. 10.0
>cpu0: 32KB/32B 2-way set-associative L1 Instruction cache, 48 TLB entries
>cpu0: 32KB/32B 2-way set-associative write-back L1 Data cache
>gt0 at mainbus0 addr 0x14000000
>pci0 at gt0
>pci0: i/o space, memory space enabled, rd/line, wr/inv ok
>pchb0 at pci0 dev 0 function 0: Galileo GT-64111 System Controller, rev 1
>tlp0 at pci0 dev 7 function 0: DECchip 21143 Ethernet, pass 4.1
>tlp0: interrupting at level 1
>tlp0: Ethernet address 00:10:e0:00:3d:71
>lxtphy0 at tlp0 phy 1: LXT970 10/100 media interface, rev. 3
>lxtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
>pcib0 at pci0 dev 9 function 0
>pcib0: VIA Technologies VT82C586 (Apollo VP) PCI-ISA Bridge, rev 39
>pciide0 at pci0 dev 9 function 1: VIA Technologies VT82C586 (Apollo VP)
>ATA33 controller
>pciide0: bus-master DMA support present
>pciide0: primary channel configured to compatibility mode
>wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALL EX6.4A>
>wd0: drive supports 16-sector PIO transfers, LBA addressing
>wd0: 6149 MB, 13328 cyl, 15 head, 63 sec, 512 bytes/sect x 12594960 sectors
>wd0: 32-bit data port
>wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
>pciide0: primary channel interrupting at irq 14
>wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using
>DMA data transfers)
>pciide0: secondary channel configured to compatibility mode
>pciide0: disabling secondary channel (no drives)
>VIA Technologies VT83C572 USB Controller (USB serial bus, revision 0x02)
>at pci0 dev 9 function 2 not configured
>ahc0 at pci0 dev 10 function 0
>ahc0: interrupting at irq 9
>ahc0: aic7859 Single Channel A, SCSI Id=7, 3/255 SCBs
>scsibus0 at ahc0: 8 targets, 8 luns per target
>tlp1 at pci0 dev 12 function 0: DECchip 21143 Ethernet, pass 4.1
>tlp1: interrupting at level 2
>tlp1: Ethernet address 00:10:e0:00:3d:8c
>lxtphy1 at tlp1 phy 1: LXT970 10/100 media interface, rev. 3
>lxtphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
>scsibus0: waiting 2 seconds for devices to settle...
>boot device: <unknown>
>root on tlp0
>nfs_boot: trying DHCP/BOOTP
>nfs_boot: DHCP next-server: 10.8.6.66
>nfs_boot: my_name=testqube
>nfs_boot: my_domain=central
>nfs_boot: my_addr=192.168.1.100
>nfs_boot: my_mask=255.255.255.0
>nfs_boot: gateway=192.168.1.1
>root on 192.168.1.1:/exports/testqube-1.6/root
>warning: no /dev/console
>init: Creating mfs /dev
>Mon Jan 20 18:21:36 UTC 2003
>Starting file system checks:
>Setting tty flags.
>Enabling ipfilter.
>open device: No such file or directory
>SIOCFRENB: Bad file descriptor
>open device: No such file or directory
>ioctl(SIOCIPFFL): Bad file descriptor
>open device: No such file or directory
>28:ioctl(add/insert rule): Bad file descriptor
>29:ioctl(add/insert rule): Bad file descriptor
>	<snip more rules that do not load>
>Setting sysctl variables:
>Starting network.
>Hostname: testqube
>default              192.168.1.1          done
>Configuring network interfaces:.
>writing to routing socket: Network is unreachable
>open device: No such file or directory
>SIOCFRSYN: Bad file descriptor
>Building databases...
>kvm_mkdb: machdep.booted_kernel: the value is not available: No such
>file or directory
>Starting syslogd.
>Starting ipmon.
>/dev/ipl: open: No such file or directory
>Checking for core dump...
>savecore: no core dump (no dumpdev)
>Starting named.
>Mounting all filesystems...
>Clearing /tmp.
>Installing NAT rules ... /dev/ipnat: open: No such file or directory
>Checking quotas: done.
>Setting securelevel: kern.securelevel: 0 -> 1
>swapctl: adding 192.168.1.1:/exports/testqube-1.6/swap as swap device at
>priority 0
>Starting virecover.
>starting local daemons:.
>Updating motd.
>Starting ntpd.
>Starting sshd.
>Starting inetd.
>Starting cron.
>Mon Jan 20 18:21:55 UTC 2003
>
>NetBSD/cobalt (testqube) (tty00)
>
>login: 

Have you used MAKEDEV to create the device nodes in /dev?

christos