From roderick@stud187236.mobiel.utwente.nl  Sat Jan 17 14:07:27 2004
Return-Path: <roderick@stud187236.mobiel.utwente.nl>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D219F16A4CE
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Jan 2004 14:07:27 -0800 (PST)
Received: from netlx050.vf.utwente.nl (netlx050.vf.utwente.nl [192.87.17.19])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C6E8343D4C
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Jan 2004 14:07:16 -0800 (PST)
	(envelope-from roderick@stud187236.mobiel.utwente.nl)
Received: from stud187236.mobiel.utwente.nl (stud187236.mobiel.utwente.nl [130.89.187.236])
          by netlx050.vf.utwente.nl (8.11.7/HKD) with ESMTP id i0HM74f17706
          for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Jan 2004 23:07:04 +0100
Received: from stud187236.mobiel.utwente.nl (localhost [127.0.0.1])
	by stud187236.mobiel.utwente.nl (8.12.10/8.12.10) with ESMTP id i0HM6P8V072806
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Jan 2004 23:06:25 +0100 (CET)
	(envelope-from roderick@stud187236.mobiel.utwente.nl)
Received: (from root@localhost)
	by stud187236.mobiel.utwente.nl (8.12.10/8.12.10/Submit) id i0HM6Ppx072803;
	Sat, 17 Jan 2004 23:06:25 +0100 (CET)
	(envelope-from roderick)
Message-Id: <200401172206.i0HM6Ppx072803@stud187236.mobiel.utwente.nl>
Date: Sat, 17 Jan 2004 23:06:25 +0100 (CET)
From: Roderick van Domburg <r.s.a.vandomburg@student.utwente.nl>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [PATCH] rc.d/ip6fw does not enable firewall
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         61501
>Category:       misc
>Synopsis:       [PATCH] rc.d/ip6fw does not enable firewall
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Jan 17 14:10:18 PST 2004
>Closed-Date:    Wed Feb 18 23:43:45 PST 2004
>Last-Modified:  Wed Feb 18 23:43:45 PST 2004
>Originator:     Roderick van Domburg
>Release:        FreeBSD 5.2-CURRENT sparc64
>Organization:
University of Twente 
>Environment:
System: FreeBSD stud187236.mobiel.utwente.nl 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Sun Jan 11 14:03:52 CET 2004 roderick@magog.student.utwente.nl:/usr/obj/usr/src/sys/MAGOG sparc64


	
>Description:
	
The "ip6fw" RC script flushes and loads the firewall rules correctly, but
never actually enables the firewall filtering itself.
>How-To-Repeat:
1. Enable IPv6 firewall services in /etc/rc.conf
2. Properly configure /etc/rc.firewall6
3. Start the IPv6 firewall service by executing `/etc/rc.d/ip6fw start`
4. Try to access a service running on a filtered port
	
>Fix:
--- /etc/rc.d/ip6fw.old Sat Jan 17 22:59:49 2004
+++ /etc/rc.d/ip6fw     Sat Jan 17 23:00:02 2004
@@ -52,6 +52,10 @@
                echo 'IPv6 Firewall logging=YES'
                sysctl net.inet6.ip6.fw.verbose=1 >/dev/null
        fi
+
+        # Enable the firewall
+        #
+        ${SYSCTL_W} net.inet6.ip6.fw.enable=1
 }

 load_rc_config $name
	
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: mtm 
State-Changed-When: Wed Feb 18 23:42:13 PST 2004 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=61501 
>Unformatted:
