Re: ipf and tape drive not working

["Richard T. Robino" <rickspam@wavedivision.com>]

On 2/8/01 9:17 PM, "Dan Phoenix" <dphoenix@bravenet.com> wrote:

> 
> 
> 
> I just don;t think you guys know how serious this really is?
> Ipf is not working....firewall not protecting network...
> has anyone seen this from upgrade from 2.7 to 2.8!!!!

fwiw, I've done that upgrade twice and haven't had any problems with normal
DAT or ipf on two boxes upgraded from 2.7-stable to (and still tracking)
2.8-stable. I believe I do it according to the faq, but I'm not sure.

RTFM mknod(8). rebuilding devices in /dev "by hand" is as simple as running
"cd /dev ; sh MAKEDEV", unless you have some special devices for special
features not usually included. In that case follow the directions which came
with the source for that feature. For your ipf files, make sure they didn't
get moved to /var/backups, and verify they are really like you thought they
used to be.

I'm using regular dump/tar/mt to work with the tapes. My tape drive is scsi
(adaptec cards) on older micron and compaq boxes. The only problem I've ever
had in an upgrade is that once a new GENERIC kernel came with a release that
didn't like my apm bios. <shrug> I always take the time to at least build a
custom kernel when building everything else.

--Rick


> 
> On Thu, 8 Feb 2001, Dan Phoenix wrote:
> 
>> Date: Thu, 8 Feb 2001 04:05:38 -0800 (PST)
>> From: Dan Phoenix <dphoenix@bravenet.com>
>> To: misc@openbsd.org
>> Subject: ipf and tape drive not working
>> 
>> 
>> After an upgrade from 2.7 to 2.8 following fact properly.....
>> tape drive and ipf don;t work.
>> The only last 2 things I did not do according to the upgrade fact are
>> upgrade /dev/ and /var by hand as per the FAQ.
>> 
>> dmesg does not even show device st* being detected.
>> When ipfilter starts.....ipfstat -io shows all the rules there....
>> ipnat does work....but the firewall is not working....any host can connect
>> to the machine.
>> 
>> My guess is after the upgrade both of these problems are due to the /dev
>> directory. My question is what does upgrade /dev by hand entail?
>> No docs were provided for this.
>> 
>> I am relatively new to this list and have not seen any emails from it yet
>> so I hope someone has run into this.