From owner-cvs-all@FreeBSD.ORG Thu Aug 19 18:03:40 2004 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D93D016A4CE; Thu, 19 Aug 2004 18:03:40 +0000 (GMT) Received: from pooker.samsco.org (pooker.samsco.org [168.103.85.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id 836F343D41; Thu, 19 Aug 2004 18:03:40 +0000 (GMT) (envelope-from scottl@samsco.org) Received: from [192.168.2.73] (cpe.125.wat.v126.packetworks.net [64.235.97.125] (may be forged)) (authenticated bits=0) by pooker.samsco.org (8.12.11/8.12.10) with ESMTP id i7JI4FUA070496; Thu, 19 Aug 2004 12:04:15 -0600 (MDT) (envelope-from scottl@samsco.org) Message-ID: <4124EADF.2070007@samsco.org> Date: Thu, 19 Aug 2004 12:01:03 -0600 From: Scott Long User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.1) Gecko/20040801 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Andre Oppermann References: <200408191759.i7JHxQnC042637@repoman.freebsd.org> In-Reply-To: <200408191759.i7JHxQnC042637@repoman.freebsd.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, hits=0.0 required=3.8 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on pooker.samsco.org cc: cvs-src@FreeBSD.org cc: src-committers@FreeBSD.org cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/netinet ip_fw2.c ip_fw_pfil.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Aug 2004 18:03:41 -0000 Andre Oppermann wrote: > andre 2004-08-19 17:59:26 UTC > > FreeBSD src repository > > Modified files: > sys/netinet ip_fw2.c ip_fw_pfil.c > Log: > Do not unconditionally ignore IPDIVERT and IPFIREWALL_FORWARD when building > the ipfw KLD. > > For IPFIREWALL_FORWARD this does not have any side effects. If the module > has it but not the kernel it just doesn't do anything. > > For IPDIVERT the KLD will be unloadable if the kernel doesn't have IPDIVERT > compiled in too. However this is the least disturbing behaviour. The user > can just recompile either module or the kernel to match the other one. The > access to the machine is not denied if ipfw refuses to load. > > Revision Changes Path > 1.72 +0 -2 src/sys/netinet/ip_fw2.c > 1.3 +0 -2 src/sys/netinet/ip_fw_pfil.c Thanks a lot. I'll ask that everyone who was having problems what this and the prvious commit addresses to please update and test as soon an possible so we can determine whether to put this into BETA1. Thanks, Scott