From owner-freebsd-net@FreeBSD.ORG Sun Apr 17 17:40:25 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6D360106564A for ; Sun, 17 Apr 2011 17:40:25 +0000 (UTC) (envelope-from gpalmer@freebsd.org) Received: from noop.in-addr.com (mail.in-addr.com [IPv6:2001:470:8:162::1]) by mx1.freebsd.org (Postfix) with ESMTP id 349E18FC08 for ; Sun, 17 Apr 2011 17:40:25 +0000 (UTC) Received: from gjp by noop.in-addr.com with local (Exim 4.74 (FreeBSD)) (envelope-from ) id 1QBVxQ-000GGn-9F; Sun, 17 Apr 2011 13:40:24 -0400 Date: Sun, 17 Apr 2011 13:40:24 -0400 From: Gary Palmer To: rondzierwa@comcast.net Message-ID: <20110417174024.GA1196@in-addr.com> References: <311011138.1263836.1303055734510.JavaMail.root@sz0128a.westchester.pa.mail.comcast.net> <104526415.1263850.1303055758946.JavaMail.root@sz0128a.westchester.pa.mail.comcast.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <104526415.1263850.1303055758946.JavaMail.root@sz0128a.westchester.pa.mail.comcast.net> X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: gpalmer@freebsd.org X-SA-Exim-Scanned: No (on noop.in-addr.com); SAEximRunCond expanded to false Cc: freebsd-net@freebsd.org Subject: Re: natd starting after firewall rules are loaded X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Apr 2011 17:40:25 -0000 On Sun, Apr 17, 2011 at 03:55:59PM +0000, rondzierwa@comcast.net wrote: > One other thing that's missing since 4.9 (and this probably needs > to go to some other list) is the kernel LINT file. Unless you already > know about these firewall options there is no where you can go > to find them. The documentation makes some mention about them, > but not all of them. I was lucky because I still had my old system lying > around that I could look at, but I found these options in the first > place because I looked at the LINT file and added any options > that I thought were pertinent. > > man, i sound like my dad... back when I was your age, we had a > kernel LINT file, you kids these days don't know anything... :-)) /sys/conf/NOTES and /sys//conf/NOTES Regards, Gary