From owner-freebsd-current@FreeBSD.ORG Thu Aug 19 13:01:05 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 90C3816A4CE for ; Thu, 19 Aug 2004 13:01:05 +0000 (GMT) Received: from the-macgregors.org (82-33-59-105.cable.ubr06.stav.blueyonder.co.uk [82.33.59.105]) by mx1.FreeBSD.org (Postfix) with ESMTP id 60A8E43D3F for ; Thu, 19 Aug 2004 13:01:00 +0000 (GMT) (envelope-from freebsd.macgregor@blueyonder.co.uk) X-Urban-Legend: Mail headers contain urban legends Received: from fire (rob@fire.macgregor [192.168.32.100]) (authenticated bits=0) by the-macgregors.org (8.13.1/8.13.1) with ESMTP id i7JD0wvm006811 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); Thu, 19 Aug 2004 13:00:58 GMT Message-Id: <200408191300.i7JD0wvm006811@the-macgregors.org> From: "Rob MacGregor" To: "'Maxim Sobolev'" Date: Thu, 19 Aug 2004 14:00:58 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 In-Reply-To: <41249DEA.80404@portaone.com> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thread-Index: AcSF6QDE9KcyBfNyRfqflTTETKeRqQAA271g X-Virus-Scanned: by amavisd-milter (http://www.amavis.org/) cc: current@freebsd.org Subject: RE: RELENG_5 kernel b0rken with IPFIREWALL and without PFIL_HOOKS X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Aug 2004 13:01:05 -0000 On Thursday, August 19, 2004 1:33 PM, Maxim Sobolev <> danced on the keyboard and produced: > After recent changes I am unable to compile RELENG_5 kernel (and > probably HEAD as well, but I have not tested it) with IPFIREWALL but > without PFIL_HOOKS. Neither manpage, nor NOTES lists PFIL_HOOKS as a > requirement for IPFIREWALL. Please fix. >From /usr/src/UPDATING: 20040308: The packet filter (pf) is now installed with the base system. Make sure to run mergemaster -p before installworld to create required user account ("proxy"). If you do not want to build pf with your system you can use the NO_PF knob in make.conf. Also note that pf requires "options PFIL_HOOKS" in the kernel. The pf system consists of the following three devices: device pf # required device pflog # optional device pfsync # optional -- Rob | Oh my God! They killed init! You bastards!