From owner-cvs-all@FreeBSD.ORG Fri May 12 05:05:26 2006 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F089516A54F; Fri, 12 May 2006 05:05:25 +0000 (UTC) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id B884143D53; Fri, 12 May 2006 05:05:17 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1]) by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id k4C55H83014932; Thu, 11 May 2006 22:05:17 -0700 Received: (from brdavis@localhost) by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id k4C55HwF014931; Thu, 11 May 2006 22:05:17 -0700 Date: Thu, 11 May 2006 22:05:17 -0700 From: Brooks Davis To: Hajimu UMEMOTO Message-ID: <20060512050517.GA12724@odin.ac.hmc.edu> References: <200605120441.k4C4fSl7018302@repoman.freebsd.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="RnlQjJ0d97Da+TV1" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Virus-Scanned: by amavisd-new X-Spam-Status: No, hits=1.0 required=8.0 tests=SUBJ_HAS_SPACES autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu Cc: cvs-src@FreeBSD.org, Max Laier , cvs-all@FreeBSD.org, src-committers@FreeBSD.org Subject: Re: cvs commit: src/sys/netinet ip_fw.h ip_fw2.c ip_fw_pfil.c ip_input.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 May 2006 05:05:26 -0000 --RnlQjJ0d97Da+TV1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, May 12, 2006 at 01:57:32PM +0900, Hajimu UMEMOTO wrote: > Hi, >=20 > >>>>> On Fri, 12 May 2006 04:41:28 +0000 (UTC) > >>>>> Max Laier said: >=20 > mlaier> mlaier 2006-05-12 04:41:28 UTC >=20 > mlaier> Modified files: > mlaier> sys/netinet ip_fw.h ip_fw2.c ip_fw_pfil.c ip_input.c= =20 > mlaier> Log: > mlaier> Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ip= v6 processing > mlaier> seperately. Also use pfil hook/unhook instead of keeping the c= heck >=20 > It seems net.inet6.ip6.fw.enable is conflict between ipfw and ip6fw, > now. I think that it prevent users from using ipfw for IPv4 and ip6fw > for IPv6. This is a preparatory commit for removal of IP6FW. We're aware that IPFW isn't a perfect replacement for IP6FW, but we've got to get the number of firewalls down to something reasonable and this has been on the list since last BSDCan. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --RnlQjJ0d97Da+TV1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFEZBeMXY6L6fI4GtQRAj+6AJ9PzMvNDyX9HNp/GiEc+/livnuG2wCg1Bnz Gl1c+N26sipRRGc8tCWv8eI= =CQ7Y -----END PGP SIGNATURE----- --RnlQjJ0d97Da+TV1--