From owner-freebsd-current  Wed Aug 21  9:26:38 2002
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B4AC637B400; Wed, 21 Aug 2002 09:26:35 -0700 (PDT)
Received: from leviathan.inethouston.net (leviathan.inethouston.net [66.64.12.249])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 42A8043E3B; Wed, 21 Aug 2002 09:26:35 -0700 (PDT)
	(envelope-from dwcjr@inethouston.net)
Received: by leviathan.inethouston.net (Postfix, from userid 1001)
	id 125CE3198CA; Wed, 21 Aug 2002 11:26:32 -0500 (CDT)
Date: Wed, 21 Aug 2002 11:26:32 -0500
From: "David W. Chapman Jr." <dwcjr@inethouston.net>
To: Sergey Mokryshev <mokr@mokr.net>
Cc: cjclark@alum.mit.edu, Radko Keves <rado@studnet.sk>,
	questions@FreeBSD.ORG, current@FreeBSD.ORG
Subject: Re: question about ipl.ko
Message-ID: <20020821162631.GA38043@leviathan.inethouston.net>
Reply-To: "David W. Chapman Jr." <dwcjr@inethouston.net>
Mail-Followup-To: Sergey Mokryshev <mokr@mokr.net>,
	cjclark@alum.mit.edu, Radko Keves <rado@studnet.sk>,
	questions@FreeBSD.ORG, current@FreeBSD.ORG
References: <20020816130147.GA39907@studnet.sk> <20020816193854.GC47465@blossom.cjclark.org> <062201c2475f$9f19ab40$0f0010ac@office.tersys.ru> <20020820181519.GA69240@blossom.cjclark.org> <0ab501c2492d$bc90fe10$0f0010ac@office.tersys.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <0ab501c2492d$bc90fe10$0f0010ac@office.tersys.ru>
X-Operating-System: FreeBSD 4.6-STABLE i386
User-Agent: Mutt/1.5.1i
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

> Another point - you can upgrade ipfilter stuff without rebooting,
> it is useful in situations where minimum downtime is possible.
> 
> PFIL_HOOKS does not add much functionality to the kernel and
> I always turn this on on every box.

I think you are missing his point though.  Some people kldload ipl.ko 
because they don't want to recompile their kernel.  IF they recompile 
it with PFIL_HOOKS might as well do ipfilter at the same time.
 
-- 
David W. Chapman Jr.
dwcjr@inethouston.net	Raintree Network Services, Inc. <www.inethouston.net>
dwcjr@freebsd.org	FreeBSD Committer <www.FreeBSD.org>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message