From owner-freebsd-doc Fri Oct 4 18:59: 8 2002 Delivered-To: freebsd-doc@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4F74137B401; Fri, 4 Oct 2002 18:59:06 -0700 (PDT) Received: from www.reppep.com (www.reppep.com [66.92.104.200]) by mx1.FreeBSD.org (Postfix) with ESMTP id C1F2A43E91; Fri, 4 Oct 2002 18:59:05 -0700 (PDT) (envelope-from pepper@reppep.com) Received: from [66.92.104.201] (g4.reppep.com [66.92.104.201]) by www.reppep.com (Postfix) with ESMTP id D8031AC2A; Fri, 4 Oct 2002 22:00:23 -0400 (EDT) Mime-Version: 1.0 X-Sender: pepper@mail.reppep.com Message-Id: In-Reply-To: <20020710205336.GC2739@hades.hell.gr> References: <200207030020.g630K4GZ037338@freefall.freebsd.org> <20020708183507.GE1126@fonix.adamsfamily.xx> <20020708200642.GG1126@fonix.adamsfamily.xx> <20020710205336.GC2739@hades.hell.gr> Date: Fri, 4 Oct 2002 21:57:09 -0400 To: Giorgos Keramidas From: Chris Pepper Subject: Re: docs/39824: Various tweaks for doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml; corresponding comment clarification for GENERIC Cc: Szilveszter Adam , freebsd-doc@FreeBSD.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-doc@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org At 11:53 PM +0300 2002/07/10, Giorgos Keramidas wrote: >On 2002-07-08 16:19 +0000, Chris Pepper wrote: >> >AFAIK, ipfw can be made to work in this way too. Some modules even >> >should be able to load themselves on-demand before they are first >> >needed, but I do not know what are these. (One tip: do not expect >> >this method to work with the msdosfs module and a floppy) >> >> That's a biggie -- all the IPFW docs (man page & handbook) says a >> kernel rebuild is required; neither source, nor >> /etc/defaults/rc.conf (which provides a bunch of switches to >> activate and configure IPFW) provides any information on enabling >> the firewall without a kernel rebuild, which I'm told is the *right* >> way to do it. Still searching.... > >Hmmm. Then we should fix the documentation. IPFW works fine as a >module, and has been working fine for quite some time. There are a >few details one should pay attention to (like kern.securelevel, which >might inhibit the loading of modules) but it generally works. What >parts of the documentation mention that recompiling a kernel is >absolutely necessary to make ipfw(8) work needs fixing :/ Giorgios, I think this PR got dropped. Can you apply whatever you like of it, and let me know what you don't like? I will revisit documenting IPFW/USB (module) load requirements at a later date, when I have time to play around with IPFW. Thanks, Chris -- Chris Pepper: Rockefeller University: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-doc" in the body of the message