wpa_supplicant && ipfilter && 6.0-REL

[guru at Sisis.de]

Hello,

I'm using ipfilter in my 6.0-REL and this is working fine, even
with the iwi0 interface of my W-LAN card when I'm accessing the at
home my access point with WEP security.

Now in our office we installed an AP using WPA-PSK security and
I bring the interface up with some script like:

 
    #!/bin/sh
    #
    
    kldload -v wlan_acl wlan_wep wlan_ccmp wlan_tkip
    
    ifconfig bge0 down
    ifconfig bge0 inet 222.222.222.222
    route delete default
    
    wpa_supplicant -B -i iwi0 -c /etc/wpa_supplicant.conf
    
    sleep 1
    ifconfig iwi0 inet 193.31.10.34 netmask 255.255.255.224
    route add default 193.31.10.58

The interface iwi0 gets associated fine without any problem
but traffic does not go out, even for the allowed ports in
/etc/ipf.rules, like port 80 outbound and so on. First I thought
that some how the wpa_supplicant was not working fine, but when
I delete all ipfilter with "ipf -D" the W-LAN is working nicely.

I have the following kernel mods loaded:

# kldstat
Id Refs Address    Size     Name
 1   25 0xc0400000 63070c   kernel
 2    1 0xc0a31000 4d08     if_tap.ko
 3    1 0xc0a36000 57c8     snd_ich.ko
 4    2 0xc0a3c000 1d408    sound.ko
 5    1 0xc0a5a000 a30c     if_iwi.ko
 6    1 0xc0a65000 2c90     wlan_wep.ko
 7    1 0xc0a68000 4ac8     atapicam.ko
 8   16 0xc0a6d000 568dc    acpi.ko
 9    1 0xc27c5000 2a000    ipl.ko
10    1 0xc2916000 15000    linux.ko
11    1 0xc2d13000 3000     wlan_acl.ko
12    1 0xc2d1e000 7000     wlan_ccmp.ko
13    1 0xc2d25000 4000     wlan_tkip.ko

What could be the problem with the ipfilter?
Thx

	matthias

-- 
Matthias Apitz
Manager Technical Support - OCLC PICA GmbH
Gruenwalder Weg 28g - 82041 Oberhaching - Germany
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e <m.apitz at oclcpica.org> - w http://www.oclcpica.org/