From owner-freebsd-pf@FreeBSD.ORG Mon Aug 21 14:48:37 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E28716A4DF for ; Mon, 21 Aug 2006 14:48:37 +0000 (UTC) (envelope-from levchenko.i@gmail.com) Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.234]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1649543EFA for ; Mon, 21 Aug 2006 14:46:05 +0000 (GMT) (envelope-from levchenko.i@gmail.com) Received: by wr-out-0506.google.com with SMTP id 70so235420wra for ; Mon, 21 Aug 2006 07:46:00 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=RpLL9ezapn+SaHHNGWDCQvMApIaI/34JAVgnniJbLZwEv5vOBZJEtscupTC8IxWPXMzjnKQmaAbB6/uhNRKfDPsOubZ7NH4ZGem9uDA029qz2iNU9vWt5zHpuK/u87PTim+u+5lck9iM/uZ9ia2FYWjx7WiY7Swfbq3RSS8yhvs= Received: by 10.66.221.19 with SMTP id t19mr3705703ugg; Mon, 21 Aug 2006 07:46:00 -0700 (PDT) Received: by 10.66.239.8 with HTTP; Mon, 21 Aug 2006 07:46:00 -0700 (PDT) Message-ID: Date: Mon, 21 Aug 2006 17:46:00 +0300 From: "Ivan Levchenko" To: "Kian Mohageri" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20060818141823.55551.qmail@web33913.mail.mud.yahoo.com> Cc: beno - , freebsd-pf@freebsd.org Subject: Re: Easy Question From Newbie X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2006 14:48:37 -0000 actually, could you please tell whats the difference? thanks in advance. On 8/20/06, Kian Mohageri wrote: > > > > On 8/18/06, Ivan Levchenko wrote: > > You need to either load the pf kernel module, which can be done by adding > > pf_load="YES" to /boot/loader.conf (you may also load the module > > without rebooting like this: > > kldload pf) If you use the module, then altq will not work for you. > > > > I would suggest loading pf via /etc/rc.conf instead: > > pf_enable="YES" # Set to YES to enable packet filter (pf) > pf_rules="/etc/pf.conf" # rules definition file for pf > pflog_enable="YES" # Set to YES to enable packet filter logging > > The rc script will load the module if it needs to. See > /etc/defaults/rc.conf for other variables /etc/rc.d/pf* uses. > > Kian > > -- Best Regards, Ivan Levchenko levchenko.i@gmail.com