Date: Thu, 25 Oct 2012 17:54:51 +0400 From: "Andrey V. Elsukov" <ae@FreeBSD.org> To: John Baldwin <jhb@freebsd.org> Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r242079 - in head: sbin/ipfw share/man/man4 sys/conf sys/net sys/netinet sys/netinet6 sys/netpfil/ipfw Message-ID: <508944AB.1010605@FreeBSD.org> In-Reply-To: <201210250928.38465.jhb@freebsd.org> References: <201210250939.q9P9dF0q022970@svn.freebsd.org> <201210250928.38465.jhb@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 25.10.2012 17:28, John Baldwin wrote: >> Remove the IPFIREWALL_FORWARD kernel option and make possible to turn >> on the related functionality in the runtime via the sysctl variable >> net.pfil.forward. It is turned off by default. > > Certainly for MFC's I think it makes sense to retain the option, but > make the option simply change the default from off to on. That avoids > breaking existing kernel configurations. Yes, this is exactly what i plan to do. -- WBR, Andrey V. Elsukov [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBAgAGBQJQiUSyAAoJEAHF6gQQyKF6AjcH/0tW4CqOINZL/1H3lD5OnB7N 4YPyv8z4T47j8pc3y8C00y5FCo2Ev7SVJaTAxF1VLQ3Oi+wefsRk+T740RVRbFMA /Wfn/92mtepAKWSmRq5T6OJxhyiPbaRgq/ITwszJms99sPG5DdHc5S6U/iwxyMH5 zUx9o8kxKCRyTjm1Ras8l7pq0t49JMA/csf5B+oqlGih1SGDZUAkYTr64bpJRCzq SbntEgJLcETSmA8Vts91m4xG3I1p6mN1ufqNeXrIa+37eN5LCq7PhgDhxLIpwBkv +w5yxylt5kWbJkP9qgdRKFpxW4U0L9SFq35QIjhLgMY5oPCyfcvUOzjL7oWI0hw= =4bea -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?508944AB.1010605>