Re: Altavista Firewall98 SP3 broken on DU40D

["Marcus J. Ranum" <mjr () nfr net>]

>   ioctl (SIOCSREENON): Operation not supported on socket
>   Cannot set Screen Mode ON
>
> This means that after aplying this service pack the machine no longer does
> screening (packet filtering) and might even be acting as a router now since
> the forwarding on the firewall is (and should be?) on. This is fatal for
> security afcourse!


Sounds like the patch install removed the kernel config for the
screen device. You need to make sure that it's turned back on
in the kernel, then rebuild and reinstall the kernel.

mjr.

--
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
work - http://www.nfr.net
home - http://www.clark.net/pub/mjr