Hi! Looks like kernel is broken without the bellow patch.
-Dennis --- /usr/src/sys/netinet/ip_fw2.c Thu Oct 24 20:04:44 2002 +++ /usr/src/sys/netinet/ip_fw2.c.new Thu Oct 24 22:48:43 2002 @@ -2501,7 +2501,7 @@ ipfw_ctl(struct sockopt *sopt) for (rule = layer3_chain; rule ; rule = rule->next) { int i = RULESIZE(rule); bcopy(rule, bp, i); - ((struct ip_fw *)bp)->set_disable = set_disable; + ((struct ip_fw *)bp)->next_rule = set_disable; bp = (struct ip_fw *)((char *)bp + i); } if (ipfw_dyn_v) { @@ -2513,7 +2513,7 @@ ipfw_ctl(struct sockopt *sopt) for ( p = ipfw_dyn_v[i] ; p != NULL ; p = p->next, dst++ ) { bcopy(p, dst, sizeof *p); - dst->rulenum = p->rule->rulenum; + dst->rule = p->rule->rulenum; /* * store a non-null value in "next". * The userland code will interpret a To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message