Date: Thu, 18 May 2006 19:39:21 +0300 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: "Michael P. Soulier" <msoulier@digitaltorque.ca> Cc: freebsd-questions@freebsd.org Subject: Re: kernel module for ipf Message-ID: <20060518163921.GB60882@gothmog.pc> In-Reply-To: <fb6605670605180905g3451f7c8j77d6d1af18e08650@mail.gmail.com> References: <fb6605670605180905g3451f7c8j77d6d1af18e08650@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2006-05-18 12:05, "Michael P. Soulier" <msoulier@digitaltorque.ca> wrote: > Hello, > > The handbook mentions that ipf should work out of the box in FreeBSD > thanks to a kernel module, but it doesn't say which one. > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html > > "IPF is included in the basic FreeBSD install as a separate run time > loadable module. The system will dynamically load the IPF kernel > loadable module when the rc.conf statement ipfilter_enable="YES" is > used. The loadable module was created with logging enabled and the > default pass all options. You do not need to compile IPF into the > FreeBSD kernel just to change the default to block all, you can do > that by just coding a block all rule at the end of your rule set." > > I don't see anything under /boot/kernel that looks like a likely > candidate. There's an ipfw.ko, but no ipf or ipfilter. I'd prefer to > not reboot my system just to find out, so could someone point me to > the correct module? I'm running FreeBSD 5.4 with the GENERIC kernel. The module is called "ipl.ko": # ls -l /boot/kernel/ipl.* -r-xr-xr-x 1 root wheel - 171625 May 16 16:05 /boot/kernel/ipl.ko -r-xr-xr-x 1 root wheel - 371887 May 16 16:05 /boot/kernel/ipl.ko.symbols # Strange and weird, but this is the name the IP Filter kernel module has had for years, so it's not easy to change it now without breaking all the scripts around the world that assume its name is "ipl". - Giorgos
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060518163921.GB60882>