by nosesquid » Sun Dec 04, 2011 11:38 pm
See mysteri's post, the problem modules are mii, gmac, and scsi_wait_scan. As far as I can tell iptables doesn't even start automatically by default, you have to manually add it in rc.conf.
What's more, for me at least iptables doesn't seem to work. This has persisted even after rebuilding the netfilter modules, rules can be added, but never match anything:
$this->bbcode_second_pass_code('', '
[root@Winona etc]# iptables -F
[root@Winona etc]# iptables -A INPUT -p icmp -j DROP
[root@Winona etc]# ping localhost
PING localhost.localdomain (127.0.0.1) 56(84) bytes of data.
64 bytes from localhost.localdomain (127.0.0.1): icmp_req=1 ttl=64 time=0.143 ms
64 bytes from localhost.localdomain (127.0.0.1): icmp_req=2 ttl=64 time=0.103 ms
64 bytes from localhost.localdomain (127.0.0.1): icmp_req=3 ttl=64 time=0.104 ms
^C
--- localhost.localdomain ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2010ms
rtt min/avg/max/mdev = 0.103/0.116/0.143/0.022 ms
[root@Winona etc]# iptables -vnL INPUT
Chain INPUT (policy ACCEPT 527 packets, 0 bytes)
pkts bytes target prot opt in out source destination
1 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0
')