https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291562
--- Comment #11 from [email protected] --- A commit in branch stable/14 references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=704ec5e68c44f08d83f3b0daa315c6143338863f commit 704ec5e68c44f08d83f3b0daa315c6143338863f Author: Boris Lytochkin <[email protected]> AuthorDate: 2026-02-10 11:50:20 +0000 Commit: Andrey V. Elsukov <[email protected]> CommitDate: 2026-02-10 11:50:20 +0000 ipfw: add ability to run ipfw(8) binary with 15.0+ kernel module After D46183 the KBI was changed and this made the upgrade procedure to 15.0+ version a bit difficult, because the old binary can not load firewall rules when the new kernel is loaded. This commit adds the sbin/ipfw15 binary that uses new KBI, and then original sbin/ipfw can detect new KBI and run the new binary instead. PR: 291562 Reviewed by: jhb, glebius Fixes: 4a77657cbc01 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54763 sbin/Makefile | 1 + sbin/ipfw/main.c | 26 + sbin/ipfw15/Makefile (new) | 23 + sbin/ipfw15/Makefile.depend (new) | 19 + sbin/ipfw15/altq.c (new) | 152 + sbin/ipfw15/dummynet.c (new) | 2016 +++++++ sbin/ipfw15/include15/alias15.h (new) | 259 + .../ipfw15/include15/netinet/ip_dummynet15.h (new) | 284 + sbin/ipfw15/include15/netinet/ip_fw15.h (new) | 1172 ++++ .../include15/netinet6/ip_fw_nat64_15.h (new) | 212 + .../include15/netinet6/ip_fw_nptv6_15.h (new) | 52 + sbin/ipfw15/ip_fw15.h (new) | 1172 ++++ sbin/ipfw15/ipfw.8 (new) | 5094 ++++++++++++++++ sbin/ipfw15/ipfw2.c (new) | 6129 ++++++++++++++++++++ sbin/ipfw15/ipfw2.h (new) | 470 ++ sbin/ipfw15/ipv6.c (new) | 519 ++ sbin/ipfw15/main.c (new) | 716 +++ sbin/ipfw15/nat.c (new) | 1196 ++++ sbin/ipfw15/nat64clat.c (new) | 536 ++ sbin/ipfw15/nat64lsn.c (new) | 901 +++ sbin/ipfw15/nat64stl.c (new) | 552 ++ sbin/ipfw15/nptv6.c (new) | 452 ++ sbin/ipfw15/tables.c (new) | 2096 +++++++ 23 files changed, 24049 insertions(+) -- You are receiving this mail because: You are the assignee for the bug.
