Date: Thu, 18 May 2006 17:19:10 +0100 From: Scott Mitchell <scott+lists.freebsd@fishballoon.org> To: "Michael P. Soulier" <msoulier@digitaltorque.ca> Cc: freebsd-questions@freebsd.org Subject: Re: kernel module for ipf Message-ID: <20060518161909.GA41738@llama.fishballoon.org> In-Reply-To: <fb6605670605180905g3451f7c8j77d6d1af18e08650@mail.gmail.com> References: <fb6605670605180905g3451f7c8j77d6d1af18e08650@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, May 18, 2006 at 12:05:00PM -0400, Michael P. Soulier wrote: > Hello, > > The handbook mentions that ipf should work out of the box in FreeBSD > thanks to a kernel module, but it doesn't say which one. > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html > > "IPF is included in the basic FreeBSD install as a separate run time > loadable module. The system will dynamically load the IPF kernel > loadable module when the rc.conf statement ipfilter_enable="YES" is > used. The loadable module was created with logging enabled and the > default pass all options. You do not need to compile IPF into the > FreeBSD kernel just to change the default to block all, you can do > that by just coding a block all rule at the end of your rule set." > > I don't see anything under /boot/kernel that looks like a likely > candidate. There's an ipfw.ko, but no ipf or ipfilter. I'd prefer to > not reboot my system just to find out, so could someone point me to > the correct module? I'm running FreeBSD 5.4 with the GENERIC kernel. Hi Mike, You want the ipl.ko module. No, I have no idea why it's called ipl not ipf either... Cheers, Scott -- =========================================================================== Scott Mitchell | PGP Key ID | "Eagles may soar, but weasels Cambridge, England | 0x54B171B9 | don't get sucked into jet engines" scott at fishballoon.org | 0xAA775B8B | -- Anon
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060518161909.GA41738>