From cagney@tpgi.com.au  Fri Sep 25 00:31:39 1998
Received: from andrew1.lnk.telstra.net (andrew1.lnk.telstra.net [139.130.51.121])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA16433
          for <FreeBSD-gnats-submit@freebsd.org>; Fri, 25 Sep 1998 00:31:36 -0700 (PDT)
          (envelope-from cagney@tpgi.com.au)
Received: (from cagney@localhost) by andrew1.lnk.telstra.net (8.8.8/8.7.3) id RAA00562; Fri, 25 Sep 1998 17:31:08 +1000 (EST)
Message-Id: <199809250731.RAA00562@andrew1.lnk.telstra.net>
Date: Fri, 25 Sep 1998 17:31:08 +1000 (EST)
From: Andrew Cagney <cagney@tpgi.com.au>
Reply-To: cagney@tpgi.com.au
To: FreeBSD-gnats-submit@freebsd.org
Subject: Is 2.2.7:ipfw not working with 2.2.stable kernel a bug?
X-Send-Pr-Version: 3.2

>Number:         8048
>Category:       kern
>Synopsis:       Is 2.2.7:ipfw not working with 2.2.stable kernel a bug?
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Sep 25 00:40:01 PDT 1998
>Closed-Date:    Fri Sep 25 17:52:30 PDT 1998
>Last-Modified:  Tue Nov 27 19:26:02 PST 2001
>Originator:     Andrew Cagney
>Release:        FreeBSD 2.2.7-RELEASE i386
>Organization:
>Environment:

	2.2.7 ignoring the kernel (which was 2.2.stable).

>Description:

	Trying a 2.2.stable branch kernel on a 2.2.7 system
	and finding that ipfw won't talk to the kernel.
	(Error about a sysctl buffer being the wrong size).

	Is this a bug?

	If it is I'll get the exact details.  If its a feature -
	thanks! :-).

>How-To-Repeat:

	Build stable kernel (with firewall enabled) and run on 2.2.7
	system.  Try ipfw commands.

>Fix:
	
	Revert back to 2.2.7-release based kernel.
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: des 
State-Changed-When: Fri Sep 25 17:52:30 PDT 1998 
State-Changed-Why:  
It's not a bug. The introduction of dummynet and the skipto feature broke 
binary compatibility, which means you need to rebuild your kernel (if you 
have an old ipfw) or ipfw (if you have an old kernel). It's annoying, but 
at least partly justified by the added functionality. 

Requests for further information concerning dummynet and skipto should be 
addressed to Luigi Rizzo (luigi@iet.unipi.it) 
>Unformatted:
