[872] in linux-net channel archive
Bad poetry about Firewalls and 1.3.17
daemon@ATHENA.MIT.EDU (Al Longyear)
Fri Aug 11 11:22:28 1995
From: Al Longyear <longyear@sii.com>
To: "'Linux Networking List'" <linux-net@vger.rutgers.edu>
Cc: "'Cox, Alan'" <iialan@iifeak.swan.ac.uk>
Date: Thu, 10 Aug 1995 13:02:27 -0700
Please forgive my bad metric rhyme poetry about the recent 1.3.17 kernel.
Try as I may, try as I might, I could not get firewalls to
work last night.
The problem comes from the recent change in that kernel which moved the
firewall proc file system initialization logic to the firewall module.
Unfortunately, no one bothered to call the firewall initialization
procedure so the entries were not added to the proc file system.
This resulted in the kernel panicking when I did a "list" function. It died
in the lookup inode procedure of all of the strange places.
I got it to work by putting the initialization call to ip_fw_init() in the
ip_protocol_init function. However, that may not be the "best" place. I can
only tell you of the problem and my solution. I leave it up to you fine
ladies and gentlemen to find the "best" place for the initialization call
to ip_fw_init.
--
Al Longyear longyear@netcom.com