From owner-freebsd-doc Wed Jul 10 18:14:32 2002 Delivered-To: freebsd-doc@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9BF0D37B400; Wed, 10 Jul 2002 18:14:29 -0700 (PDT) Received: from mail.reppep.com (www.reppep.com [64.81.19.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2340C43E09; Wed, 10 Jul 2002 18:14:25 -0700 (PDT) (envelope-from pepper@reppep.com) Received: from [64.81.19.109] (g4.reppep.com [64.81.19.109]) by mail.reppep.com (Postfix) with ESMTP id 834F217C0A; Wed, 10 Jul 2002 20:19:57 -0400 (EDT) Mime-Version: 1.0 X-Sender: pepper@mail.reppep.com Message-Id: In-Reply-To: <20020710205336.GC2739@hades.hell.gr> References: <200207030020.g630K4GZ037338@freefall.freebsd.org> <20020708183507.GE1126@fonix.adamsfamily.xx> <20020708200642.GG1126@fonix.adamsfamily.xx> <20020710205336.GC2739@hades.hell.gr> Date: Wed, 10 Jul 2002 21:07:41 -0400 To: Giorgos Keramidas From: Chris Pepper Subject: Re: docs/39824: Various tweaks for doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml; corresponding comment clarification for GENERIC Cc: Szilveszter Adam , freebsd-doc@FreeBSD.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-doc@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org At 11:53 PM +0300 2002/07/10, Giorgos Keramidas wrote: >On 2002-07-08 16:19 +0000, Chris Pepper wrote: >> >AFAIK, ipfw can be made to work in this way too. Some modules even >> >should be able to load themselves on-demand before they are first >> >needed, but I do not know what are these. (One tip: do not expect >> >this method to work with the msdosfs module and a floppy) >> >> That's a biggie -- all the IPFW docs (man page & handbook) says a >> kernel rebuild is required; neither source, nor >> /etc/defaults/rc.conf (which provides a bunch of switches to >> activate and configure IPFW) provides any information on enabling >> the firewall without a kernel rebuild, which I'm told is the *right* >> way to do it. Still searching.... > >Hmmm. Then we should fix the documentation. IPFW works fine as a >module, and has been working fine for quite some time. There are a >few details one should pay attention to (like kern.securelevel, which >might inhibit the loading of modules) but it generally works. What >parts of the documentation mention that recompiling a kernel is >absolutely necessary to make ipfw(8) work needs fixing :/ Sure. I'm submitting patches when I know what they should say, and sending queries when I don't have enough information. Now to send some USB PRs.... Chris -- Chris Pepper: Rockefeller University: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-doc" in the body of the message